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Microsoft offers 
brief tour of Oslo 

Multipurpose modeling language, 
visual designer are core technologies 



BY DAVID WORTHINGTON 

Nearly a year after announcing 
it, Microsoft has begun to lift the 
covers on its Oslo initiative, dis- 
closing details about the model- 
ing language and modeling tools 
that anchor the platform. 

Oslo is a multiyear, multiprod- 
uct effort to develop 
technology for cus- 
tomers to build, 
deploy, design and 
manage composite 
applications. At its 
core, Oslo consists of 
M, an XML-based 
modeling language, 
and Quadrant, a 
visual modeling tool 
for Visual Studio. 

M is a general- 
purpose language 
that is designed to 
help developers in- 
tegrate models across domains. 
Parsing and lexing constructs 
enable M to translate domain- 
specific languages (DSLs) such 
as BPMN, BPEL and UML to 
lower-level formats that runtimes 
understand, said Robert Wahbe, 
a Microsoft corporate vice presi- 
dent. 

Visual Studio 2010 will provide 
IntelliSense code competition for 
creating models textually, he said. 

"I don't see any reason that 
someone couldn't tie together 
EMF [metafiles] and M in away 
that could be used as a basis for 
model-based tools in the Eclipse 




XML-based language is at 
core of Oslo initiative, 
says Microsoft's Wahbe. 



framework," said senior For- 
rester analyst Jeffrey Ham- 
mond. "As Microsoft gets more 
and more serious about ALM 
and non-.NET applications that 
run on Windows, why shouldn't 
they reach out to the Eclipse 
community?" 

Models may also 
be shared using 
Quadrant, a visual 
designer for Visual 
Studio that config- 
ures domain-specif- 
ic views of models. 
Microsoft will pro- 
vide views for data- 
bases, Web services 
and workflows but 
will rely upon its 
partners to tackle 
vertical DSLs, 

Wahbe said. 

While Microsoft 
expects that most models will be 
expressed in text, Quadrant is 
geared toward more-complicated 
models that require developers to 
work visually, he said. "It is hard 
to share models with just one [or 
the other]," Wahbe explained. 
"Other tools conflate modeling 
and pictures." 

Microsoft will standardize 
M to ensure that it has wide- 
spread industry adoption, he 
said, without saying what that 
process would be or which stan- 
dards body would oversee it. 
Microsoft recently joined the 
continued on page 32 ► 



Mono 2.0 puts .NET 
in catchup position 



BY DAVID WORTHINGTON 

Novell's open-source Mono pro- 
ject has been chasing Microsoft's 
.NET Framework since its incep- 
tion. In a turnabout, Novell now 
intends to standardize some inno- 
vations that it developed during 
the course of its work toward 
parity with .NET 2.0, leaving 
Microsoft to follow Mono. 

Mono 2.0 is a Linux-based 
implementation of the Common 
Language Infrastructure (CLI), 
an open specification developed 
by Microsoft and published under 
Ecma-335, a specfication from 
Ecma Internationa, a vendor con- 



sortium. The release, which has 
been in development since 
November 2006, is compatible 
with .NET 2.0 and includes a 
debugger and an implementation 
of Language Integrated Query 
(LINQ) from .NET 3.5. 

The Mono team received no 
assistance from Microsoft; rather, 
it relied on guidance and public 
documentation from Ecma, and 
ran tests against .NET when the 
specifications were unclear, said 
Miguel de Icaza, vice president 
of developer platforms for Novell 
and leader of the Mono project. 
continued on page 30 ► 
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Do the math! 
Tokeneer proves 
software stability 

BY ALEX HANDY 

Why bother testing your soft- 
ware when you can mathemat- 
ically prove its stability? Six 
years after Praxis High Integri- 
ty Systems got a call from the 
National Security Agency 
(NSA) to write a secure and 
reliable piece of software, that 
work has matured into Toke- 
neer, a formal open-source 
project that at last has made its 
way into the public domain. 
The project became avail- 
continued on page 28 ► 



Python breaks with past 



BY ALEX HANDY 

When a programming language 
is reworked so thoroughly that 
even "Hello World!" breaks, 
there is bound to be controversy. 
The developers of Python 3.0 
understand that. But they're 
promising a pasture of cleaner 
code and they have released ver- 
sion 2.6 to help developers get to 
that verdant meadow. 

Indeed, Python 2.6's "main 
function in life" is to ease the 
transition to its successor, said 
Raymond Hettinger, a board 
member of the Python Software 
Foundation and a core developer 
of Python. "I've never seen that 
done in a language upgrade." 

The impetus for Python 3.0 
was the desire to clean up the 
increasingly cluttered language, 



said Hettinger. 

"It had to be done," he said. 
"Python has gone through a 
number of evolutions. Initially it 
was not an object-oriented lan- 
guage. Later, object orientation 
was added on top. Then there 
was a change in how objects 
were implemented. 

"The challenge for develop- 
ers, for the past few years, was, 
This works with a new style class; 
this works with the old style 
class.' [With 3.0,] you no longer 
need to know the differences. 
The new language is just a little 
more beautiful in that regard." 

HELLO GOODBYE 

The changes in 3.0 are so far- 
reaching that even the humble 
continued on page 29 ► 
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Microsoft looks for broad adoption of Silverlight 2 



BY JEFF FEINMAN 

Microsoft is looking to increase 
the adoption rate and open- 
source capabilities of Silverlight 
with the announcement last 
month of version 2 of its rich 
Internet application platform. 

Microsoft executives said that 
the company has focused on how 
to get Silverlight deployed on the 
most machines possible. The 
final release is a 4.5MB down- 
load that can install in under 10 
seconds. All Silverlight 1 users 
will automatically be upgraded 
to version 2 in the coming weeks, 



and users don't have to take an 
"explicit upgrade action." As a 
result, Microsoft said it expects 
to see the software deployed on 
hundreds of millions of 
machines very quickly. 

Scott Guthrie, corporate vice 
president of Microsoft's devel- 
oper division, said Microsoft 
hasn't cut any features in the 
final release. He called Sil- 
verlight 1, which shipped a year 
ago, a basic media plug-in, but 
version 2 brings enhanced video 
and adaptive streaming for crisp 
video. Silverlight 2 has a cross- 



platform subset of the .NET 
framework, which is compatible 
with the full .NET version. 

"This gives the ability to use 
any programming language you 
want, so you can use C#, 
JavaScript, Python or Ruby all 
within the browser to build 
applications," Guthrie said. "This 
is pretty unique; no one else out 
there is doing anything like that. 

"One of the things we've 
heard over the last year from 
.NET developers that they find 
exciting is the fact that they can 
now learn one language, one 



tool, and one common program- 
ming model, and be able to 
build rich UI applications inside 
the browser that look visually 
stunning. That application can 
run on the desktop using the 
full .NET framework. Having 
that continuum that spans the 
server side with ASP.NET, the 
browser side with AJAX and Sil- 
verlight, and the desktop with 
WPF provides this spectrum 
where developers are no longer 
limited by the types of projects 
they can work on." 

Code running inside the 



Sun moving away from 
SOAP to embrace REST 



BY ALEX HANDY 

The JCP is hoping to give SOAP 
a REST. Sun Microsystems has 
released JAR files for JAX-RS, 
the new Java API for RESTful 
Web services. 

REST (Representational 
State Transfer) substitutes the 
traditional SOAP practices in 
favor of a natively Web-based 
solution by encoding informa- 
tion directly into URLs and 
allowing the HTTP protocol to 
do much of the heavy lifting. 

Dr. Marc J. Hadley, a senior 
staff engineer in the office of the 
CTO at Sun, was co-spec lead on 
JSR 311. He's been working with 
Web services since their incep- 
tion and was also co-lead on the 
JAX-WS specification, JSR 224. 
After years of experience with 
SOAP, Hadley said he now 
prefers REST. 

"I think it's simpler," said 
Hadley. "There's so much in 
HTTP that is still to be fully 
exploited. Without going to 
SOAP, there's so much you can 



already do that people don't 
realize. I can see there are cas- 
es where you can step up to 
SOAP. But JAX-RS is of the 
Web, whereas JAX-WS sort of 
inherits that SOAP thing where 
the Web is just a transport. 
JAX-WS is over the Web, rather 
than of the Web." 

Hadley learned a great deal 
about the capabilities of HTTP 
during his time on JAX-RS. 
"One of the biggest thing is the 
whole precondition process- 
ing," said Hadley, citing what 
he learned about HTTP. "It 
solves lots of problems, like lost 
updates. There's a lot of depth 
there that you don't realize 
when you first start working 
with HTTP. There's also a 
whole bunch there for a bunch 
of standard patterns for the 
Web, like creating a resource. 
You don't have to make a new 
method to do that, it's already 
baked into the protocol." 

JAX-RS is built specifically 
to make the design process for 



RESTful Web services simple. 
And because of REST's new 
and simplistic design, Hadley 
said that this was an easier API 
to write than previous Java Web 
services APIs. 

"We didn't really have a lot 
of baggage to bring along," said 
Hadley. "In JAX-WS, we had 
the JAX-RPC legacy, and for a 
long time JAX-WS was going to 
be JAX-RPC 2. That complicat- 
ed things a lot. In JAX-RS, we 
didn't really need to do much 
about content mapping. We 
didn't have to bake in the things 
in SOAP where you serialize 
the messages. A final thing is 
that there's no real description 
side to JAX-RS, although we've 
implemented something. We 
didn't have to do all the map- 
ping from WSDL." 

For developers working with 
REST, JAX-RS makes use of 
modern Java conventions, said 
Hadley. 

"I think we've applied Java 
annotations very nicely to the 




JAX-RS is 'of the Web/ not over 
the Web, according to Sun engi- 
neer Dr. Marc J. Hadley. 

problem," said Hadley. "The 
whole thing is a fairly modern 
framework; we use pojos and we 
use annotations to put things 
declaratively into the code, so 
you don't need lots of method 
calls. I'm pleased with the 
builder approach we've taken. 
We've made it easy to build 
URIs up from components. You 
can append queries to an existing 
URL We've applied the same 
kind of patterns to responses." 

JAX-RS is available in JAR 
form and can be downloaded 
free at jersey.dev.java.net. I 



SAFECODE OFFERS BEST PRACTICES FOR SECURE SOFTWARE 



BY JEFF FEINMAN 

The Software Assurance Forum 
for Excellence in Code (SAFE- 
Code), a nonprofit industry-led 
organization, is preaching what 
it practices with a new security 
best-practices guide. 

SAFECode's "Fundamental 
Practices for Secure Software 
Development" is based on secu- 
rity measures taken by its mem- 
ber companies, which include 
EMC, Juniper, Microsoft, SAP 
and Symantec. It outlines secure 



development practices that can 
be applied across divergent 
development environments. 

"[The guide] moves us 
beyond theoretical best practices 
to identify the secure develop- 
ment methods that have proven 
to be both effective and imple- 
mentable even when different 
product requirements and devel- 
opment methodologies are con- 
sidered," said Paul Kurtz, execu- 
tive director of SAFE Code. 

"Fundamental Practices for 



Secure Software Development" 
offers security practices for 
each phase of the development 
life cycle, defined by SAFE- 
Code as requirements, design, 
programming, testing, code 
handling and documentation. 
During requirements defini- 
tion, according to SAFECode, 
product managers should 
account for time to engage in 
secure development practices, 
and the development and QA 
staff should be trained in secure 



development prior to product 
release. 

The key to a secure software 
design process is threat analysis, 
which can find potential issues 
that might not be found with 
techniques like code reviews or 
static analysis. "Threat analysis 
helps find issues before code 
is committed so they can be 
mitigated as early as possible 
in the software development 
life cycle," SAFECode's guide 
continued on page 19 ► 



browser using the .NET frame- 
work and Silverlight can run 
more than 1,000 times faster 
than JavaScript running inside 
the browser, Microsoft execu- 
tives claimed. Silverlight 2 can 
work with a rich UI program- 
ming model that provides cal- 
endars, sliders and other con- 
trols. Those controls can let 
developers program applica- 
tions at a higher level rather 
than having to manipulate 
every UI element directly. 

The new version of Sil- 
verlight allows control skinning 
and templating, so the develop- 
er can skin and customize a con- 
trol without changing any code. 
There is also a rich networking 
stack, so users can call Web ser- 
vices and sockets on the Inter- 
net, which allows applications to 
span multiple sites. 

"We think from a developer 
perspective it's a really, really 
rich programming platform, 
and developers can partner with 
designers to build great experi- 
ences," Guthrie said. "We're 
looking forward to seeing what 
people build with it, and over 
the next year we'll see a bunch 
of sites that will blow our minds 
in terms of capabilities." 

Guthrie called Silverlight 2 a 
unique release in terms of the 
unprecedented amount of 
deployments during its beta 
testing phase. For its Olympic 
broadcasts this past summer, 
NBC streamed more than 70 
million videos in a two-week 
period with more than 600 mil- 
lion minutes of video, Guthrie 
said. Microsoft also streamed 
the U.S. Democratic National 
Convention using Silverlight. 

SHINING LIGHT ON ECLIPSE 

In addition to Silverlight 2, 
Microsoft is shipping Visual 
Studio Development Tools for 
Silverlight, which will work 
with Visual Studio 2008 and 
Visual Web Developer Express, 
a free version of Visual Studio. 

Microsoft is also funding a 
project to integrate Silverlight 
development capabilities into 
Eclipse (see full story, page 32). 
That technology is available as 
a preview from its website. Bri- 
an Goldfarb, director of Micro- 
soft's development platform 
group, said that Eclipse inter- 
operability will start with a 
Windows focus, but will even- 
tually move onto Linux and 
Mac platforms. I 
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Israel-based information security company Aladdin Knowledge Sys- 
tems has created a facility for "Internet security cybercrime investi- 
gation," the company said. The Attack Intelligence Research Center 
brings input from security researchers and law enforcement to help 
organizations implement best practices. Aladdin executives said the 
center will publish semi-annual security trend reports that both sum- 
marize Web threats over the past six months and predict threats to 
businesses in the next six months . . . WhiteHat Security has creat- 
ed a .NET security course that reviews secure coding guidelines and 
.NET features, like anti-XSS libraries, the company said. The two-day 
course will try to help developers keep security in mind through the 
whole development process. The company also added cross-site 
request forgery, business logic flaws and blind SQL injections as top- 
ics to its Web Application Security training course. 



NEW PRODUCTS 



Communications and enterprise application provider Agnity created 
the ACONYX architecture, a software component framework for 
developing multiple communication services. ACONYX includes com- 
ponents for multimedia server control, messaging, conferencing and 
fixed mobile convergence. Company executives said the architecture 
can integrate with Web 2.0 services and mashups . . . CPU debugging 
company Macraigor Systems released a free Eclipse Ganymede-com- 
pliant embedded debugging product. The Macraigor Eclipse + GNU 
Tools Suite packages Eclipse 3.4.1 with a program called OCDRemote, 
which provides an interface between Eclipse, the GDB debugger and a 
Macraigor On-Chip debug device. 



UPDATES 



_L 



Absoft, a maker of compilers and debuggers, has added SSE4 vector 
capabilities for applications running on 32- and 64-bit x86 processors 
from AMD to version 10.2 of its Pro Fortran compiler suite. The new 
version has IDE improvements that simplify code development and 
maintenance with a graphical IDE designed specifically for C and For- 
tran development, the company said. It includes an Fx3 debugger with 
filtering capabilities . . . Reguirements software provider Blueprint has 
added a cloud-based collaboration system that can align global project 
teams to Requirements Center 2009 Feature Pack Two. The Blue- 
print Resource Center, a new feature of Reguirements Center 2009, 
draws content from multiple Internet and customer-intranet resources 
to provide tools and processes to business analysts . . . CA has 
released a new version of its Wily Application Performance Manage- 
ment product, adding the ability to do SOA deployments and provide 
insight into Web services interdependences. Company executives said 
Wily APM is optimized to help manage SOA environments, pinpointing 
components that cause Web application problems. 



PEOPLE 



Richard Walford was named vice president of engineering for Astaro, 
a company that sells security appliances. Walford was previously vice 
president of research and development in SDL Tridion. He also held 
executive positions with Compuware, Metier Management Systems 
and Softlab. With Astaro, Walford will be responsible for making sure 
products are developed and delivered properly . . . Jeremy Epstein 
was named a principal consultant for software security company Cigi- 
tal. Epstein has been a security architect for more than 20 years, 
according to Cigital, and worked for nine years at Software AG. He also 
worked in security research with Network Associates and was respon- 
sible for security evaluation of Novell NetWare. He will help govern- 
ment customers improve software security with Cigital . . . Jim Ensell 
was named vice president of business development for CollabNet, 
overseeing the software configuration management company's busi- 
ness strategies. Ensell previously served as president and COO of rfX- 
cel, a SaaS provider of supply chain applications. He also held an exec- 
utive position at Virage Logic, a company that creates semiconductors 
and DDR memory controllers. I 



Merb offers alternative 
to Rails dev framework 



BY ALEX HANDY 

In response to the Merbivores 
railing against Rails, the first 
release candidate for Merb 1.0 
was released, and it's squarely 
targeted at developers who 
want Ruby but find Rails frus- 
trating. The release came in 
mid-October at Merb Camp in 
San Diego. 

Ruby on Rails has long been 
praised for its no-nonsense, 
straightforward Web develop- 
ment model. The Merb frame- 
work attacks the problems that 
have appeared as Rails became 
popular, such as its limited data- 
base connectivity and slow 
restart times. Eighty percent of 
developers, so the reasoning 
goes, need to build database-dri- 
ven Web applications; Ruby on 
Rails can make that easy and fast. 
For the remaining 20%, howev- 
er, Rails can feel like handcuffs. 

Yehuda Katz is the maintain- 
er of the Merb project. "Most 
people do the same thing, and 
having everyone start from 
scratch and do millions of lines 
of config is not worth it," said 
Katz. "Usually, if you were out 
of the 80/20 rule, Rails was 
frustrating. 




Merb is easier than Rails to 
control on a server, says Katz. 

"Merb 1.0 aims to be roughly 
as easy as Rails to get up and run- 
ning. Because of a lot of the 
assumptions in Rails about how 
databases work, you're very lim- 
ited in what you can use. 
Because Merb doesn't make a lot 
of assumptions, it was very easy 
to add an adapter to Salesforce. 
If you're connecting to a Web 
service with Merb, it's easy to 
write a good integration with- 
out running afoul of assumptions 
in the framework." 

The differences between 
Merb and Rails don't end there. 
Katz said that the release candi- 
date of Merb 1.0 includes a lot 



of improvements made to the 
server runtime. 

"Rails has notorious complex- 
ity on the server deployment. 
But once Merb gets on the serv- 
er, it's easier to control. It's much 
easier to restart without having 
downtime. We had to get into 
the guts of how server operating 
systems work, which is some- 
thing Rails rightly avoided. With 
restarting a Rails server, you can 
have 30 seconds to a minute of 
downtime. With Merb you have 
almost no downtime. 

"A lot of people say Rails 
doesn't scale, and that's not real- 
ly true. But unlike PHP or Java, 
Rails is only recently multi- 
threaded. Ruby also has a poor 
threading model. One of the 
main purposes was to make sure 
Merb scales more efficiently. 
When you have a bunch of Merb 
workers serving Web requests, a 
lot of the memory they're using 
is the same. It doesn't change in 
each version or in each worker. 
There are ways you can get the 
OS to share memory between 
those workers. We actually built 
this into Merb." 

The project is based at 
www.merbivore.com. I 



SYBASE'S POWERDESIGNER 15 RELEASE 
TAKES ON ENTERPRISE ARCHITECTURE 

A new impact analysis dia- 
gram within Power Designer 15 
displays all dependencies and 
helps users visualize the impact 
of a change request as well as 
how much time and money it 
would take to implement the 
change, Volkmann said. 

Also new to the modeler is an 
enterprise architecture editor, 
which Volkmann described as a 
kind of meta-framework that 
helps users implement standard 
frameworks, such as DoDAF or 
Zachman, or customizations. A 
new repository Web viewer 
gives browser-based access to 
stored metadata. 

Finally, the tool lets users 
import business-level metada- 
ta from Microsoft's Visio dia- 
gramming tool to be melded 
with other EA information. 

PowerDesigner 15 is priced 
from US$7,495 to $11,495, 
according to Sybase. I 



BY DAVID RUBINSTEIN 

Enterprise architecture is a 
cross-disciplinary exercise that 
brings in elements from an 
organization's business, infor- 
mation and development 
infrastructures. And metadata 
is the thread that ties it all 
together. 

With that in mind, Sybase is 
poised to release version 15 of 
PowerDesigner, with new 
metadata capture and model- 
ing features as well as support 
for enterprise architecture ini- 
tiatives. The update to the 
product, which had been 
focused in the data modeling 
space, moves Sybase decisively 
into the market for enterprise 
architecture tools. 

PowerDesigner 15 is posi- 
tioned to compete with such 
tools as IBM's System Architect. 
That venerable product has been 
in IBM's stable since its 2007 



acquisition of Telelogic, which 
earlier had bought the tool's 
developer, Popkin Software. 

The PowerDesigner update 
is based on Sybase's "link and 
synch" technology for creating 
links among requirements, 
business process models, UML 
models and data models, 
according to Dimitri Volkmann, 
senior director of product man- 
agement in Sybase's tools and 
mobile middleware division. 
This ability to manage metadata 
helps organizations become 
more agile in the way they 
respond to changes within the 
system. "We believe EA tooling 
is a growing market and that 
there are two triggers for this," 
Volkmann said. "First is the 
need for compliance — the need 
to know how the system func- 
tions. Second is the need to 
understand how IT aligns with 
the business goals." 
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eCube brings Eclipse 
to OpenVMS systems 



BY ALEX HANDY 

Though the days of Digital 
Equipment Corp. are long 
gone, there are still Alpha and 
OpenVMS systems in general 
use throughout the world. For 
developers building Java 
applications for these plat- 
forms, Hewlett-Packard's deci- 
sion to support NetBeans 
could be seen as a loss. But 
thanks to eCube Systems, 
Eclipse will remain current 
and available for this old 
operating system. eCube 
announced the availability of 
NXTware Suite and NXTware 
Server, two sides of the same 
OpenVMS Eclipse coin. 

One of the biggest head- 
aches for OpenVMS develop- 
ment environments in enter- 
prises, said Kevin Barnes, 
president of eCube, is the 
need to have a systems admin- 
istrator on hand to add devel- 
opers to OpenVMS instances. 
Barnes said that eCube came 



up with an interesting solution 
to this problem. 

NXTware Suite and 
NXTware Server are client and 
server versions of Eclipse, 
respectively. Developers tasked 
with updating an old Java 
application running in Open- 
VMS can load the Suite on 
their Linux or Windows desk- 
top, then connect to a single 
instance of the IDE that runs 
on the server. 

This server-side Eclipse is 
installed under a single user- 
name and password, but can 
be accessed by anyone on the 
network who has been given 
permission. Thus, when a new 
developer is tasked with 
OpenVMS chores, they won't 
need a separate login and 
password to access the system. 
Barnes said that this has 
already saved a test customer a 
great deal of time. 

"The real benefit is they now 
can have developers in Java 
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NXTware is an installation of Eclipse that can be served to multiple OpenVMS users without the need for individ- 
ual user accounts. 



who don't have a background in 
VMS be productive in that 
environment," said Barnes. 
"They can unify their IDEs 
across platforms." 

With the arrival of 
NXTware, Barnes said that 



companies will likely want to 
engage eCube in some cus- 
tomization work. That, said 
Barnes, is because most Open- 
VMS shops have heavily modi- 
fied process workflows 
through modified source con- 



trol and versioning systems. 
Engaging with eCube on a 
business level will include the 
customizations needed to tie 
in NXTware to existing appli- 
cation life-cycle management 
systems. I 
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WS02 product exposes data as RESTful resources 



BY DAVID WORTHINGTON 

Data services are emerging as a 
secure alternative to the bete 
noir of privacy and security 
watchdogs: the sharing of sensi- 
tive data on physical media. A 
developer of Web services 



infrastructure software has 
released an open-source solu- 
tion for creating data services 
that it says is are more straight- 
forward than other solutions. 

WS02 announced the avail- 
ability of WS02 Data Services, 



which lets database program- 
mers expose data as Web Ser- 
vices Standards-based, repre- 
sentational state transfer 
(RE ST) -style Web resources. It 
works with any relational data- 
base that is accessible via the 



Java Database Connectivity 
standard, as well as with com- 
ma-delineated file formats and 
Microsoft Excel spreadsheets. 

Last year, a U.K. govern- 
ment CD containing personal 
data on 25 million people was 
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lost in the mail, touching off a 
political firestorm. That snafu 
could have been avoided had 
the British government set up 
a data service to share such 
information directly from its 
database, said WS02's CTO 
Paul Fremantle. 

Creating data services is 
often easier said than done, 
however, because database pro- 
grammers are in unfamiliar ter- 
ritory when using XQuery and 
XSL Transformations (XSLT), 
he said. 

Fremantle described WS02 
Data Services as a quick-and- 
dirty solution. "We started 
with KISS [keep it simple, stu- 
pid]; they take what they 
know — an SQL query or a 
stored procedure — and map it 
into a system." 

James Governor, principal 
analyst and founder of Red- 
Monk, said in a prepared 
statement that "heavyweight 
industry standards for data 
integration are not being 
widely deployed because of 
their inherent complexity. 
WS02 is addressing this com- 
plexity with its Data Services 
tooling, which is designed for 
both XML Web services and 
more lightweight, REST-style 
resources." 

WS02 Data Services pro- 
vides a caching and throttling 
solution for accessing databas- 
es — features that Fremantle 
said are the first steps toward 
more-advanced features. Mul- 
tiple data services may be 
exposed as a single service in 
this initial release, which Fre- 
mantle said is a precursor to 
Master Data Management. 
Future versions may also 
implement XQuery and XSLTs 
on top of the basic offering. 

"We are an open-source 
project and will release early 
and often," he said. For the 
current release, he said, peo- 
ple told WS02 they needed a 
solution that would make data 
useful in a SOA. 

"We are not trying to boil 
the ocean," Fremantle 
quipped. "This [release] is not 
a Rolls-Royce ... it is like a 
Ford Fiesta with security and 
airbags, but no toaster and 
mini-bar." 

WS02 offers a utility to con- 
vert XML-based files from 
Data Services into scripts that 
can be leveraged by its PHP 
data services library, which was 
released in September. I 
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Adobe shows Flash of audio excellence 

Flash Player 10 gives access to binary data and sound buffer for audio processing 



BY JEFF FEINMAN 

Adobe Systems has an ear on 
audio in the newest version of 
Adobe Flash Player plug-in. 

Flash Player 10 brings 
improved audio and video play- 
back, according to the company 
The products sound APIs have 
been tweaked so developers can 
dynamically generate audio and 
create new audio applications 
like music sequencers and mix- 
ers. Developers can also do real- 
time audio processing. 

Adobe executives explained 
that developers have access to 
the binary data of audio in Flash 
Player 10. They can also process 
it and add effects by taking the 
data out of a loaded MP3 file. 
Application level compositing of 
audio is also possible, so multi- 
ple files can be mixed together 
into a single output. 

Developers can also access 
the sound buffer in Flash Player 
10, which allows them to pass 
binary data into the sound 
buffer. "I saw a great example 
the other day with a stock chart, 
where you can listen to the 
chart and not just do it visually," 
said Justin Everett-Church, a 
senior product manager with 
Adobe. "It had a slide whistle 
effect where as the stock went 
higher over time, the pitch went 
higher, and as the stock went 
down, the pitch started going 
down. This was something you 
couldn't really do by just loading 
an audio file, you really need to 
produce this at runtime." 

Flash Player 10 offers new 
custom filters and effects, along 
with new native 3D transforma- 
tion and animation. Tom Bar- 
clay, senior product marketing 
manager of Adobes platform 
business unit, said the company 
has improved its drawing API, 
so there is less code to write 
and better 3D image rendering. 

Users can create their own 
custom filters and effects, and 
apply them to text, animation 
and video. To do this, the com- 
pany uses a feature called Adobe 
Pixel Bender, the same technolo- 
gy behind Adobe After Effects 
CS4, which is used to create 
motion graphics. Developers can 
use Pixel Blender to blend 
modes and fills to animate 
effects or change an effect on 
rich media content. 

"Adobe After Effects CS4 
creates cinematic effects for 
Hollywood movies, and now you 



can use those same effects at 
runtime on Flash Player 10," 
Barclay said. 

A new text engine lets 
developers control text layout 



and add text components. The 
text engine was designed by 
the team that created InDe- 
sign, company executives said, 
and this enables "print quality 



publishing" on the Web with 
Flash Player. 

Later this year, Adobe will 
release a set of ActionScript- 
based text components that 



offer the ability to do multi-col- 
umn text flow and display dif- 
ferent languages, including 
Arabic, Chinese, Hebrew and 
Japanese, Barclay said. I 
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What's at SPTechCon for IT professionals? 

SharePoint is way more than a collaborative corporate portal. But now 
everyone wants to leverage it for document management, business process 
management and corporate compliance. At SPTechCon, you'll learn best 
practices for managing a SharePoint environment and integrating it with other 
systems to unleash the full power of the software— and your company! 

What's at SPTechCon for 
business managers and analysts? 

SharePoint can bring great efficiencies to businesses, through the creation of 
line-of-business applications such as those used in human resources and order 
entry departments. SPTechCon features a heavy slate of classes to teach how to 
take full advantage of SharePoint, from business intelligence tools to reporting 
and much more. 

What's at SPTechCon for developers? 
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You'll learn how to create applications for SharePoint that solve real business 
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Tom Rizzo, 
Director of Microsoft 
SharePoint, said: 
"The phenomenal uptake 
of Microsoft Office 
SharePoint Server is 
transforming organizations 
of all sizes, all industries and all geographies. 
Business leaders are envisioning new uses 
of SharePoint, and IT professionals and 
developers are gearing up to implement new 
applications as well as integrate SharePoint 
to other enterprise software. This is creating 
significant demand for training and education. 
We're delighted BZ Media is introducing this 
new SharePoint technical conference." 
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CA adds Clarity to software change management 

Integration with PPM tool, improved refactoring and Eclipse-based interface also included 



BY JEFF FEINMAN 

CA has updated Software 
Change Manager with added 
integrations and refactoring 
enhancements. 

Software Change Manager 
rl2 integrates with other CA 
products, including the Clarity 
project portfolio manager, Ser- 
vice Desk Manager and Soft- 
ware Delivery. 

The ability to work with 
Clarity gives project managers 
real-time visibility into their 
projects' status, said Prajval 
Parthasarathy, vice president of 
software engineering at CA. 
"Not only do you plan a project 
for application development, 
but you can also execute it 
according to the process that 
you've established." 

Meanwhile, "the integration 
between Service Desk Manager 
and Software Change Manager 
allows organizations to open a 
change request and have devel- 
opers review and analyze it," 
Parthasarathy said. "As the 
developers work on the change 
request, IT people have visibili- 
ty into where the change is; 
when it's deployed, the change 
is updated and the ticket can be 
closed." 

Software Change Manager 
rl2 simplifies code refactoring 
by automating changes. The 
product lets programmers 
rename files and paths for the 
source code without breaking 
builds. It retains full auditing, 
security permissions and modi- 
fication history for the code, 
according to CA. 

ADDITIONAL FEATURES 

The rl2 release also adds the 
ability to synchronize files when 
multiple developers work on 
the same item in concurrent 
fashion. Users make changes 
locally and then synchronize 
them with the change manage- 
ment repository. 

Software Change Manager 
rl2 integrates with OpenMake's 
Meister, in a bid to solve build 
problems using "build foren- 
sics" to bridge the production 
application back to its source 
code. 

Also new is an Eclipse-based 
interface that can handle both 
isolated and shared work areas, 
according to CA. 

Parthasarathy said CA uses 
Software Change Manager in 
its own development environ- 



ment to manage 3,500 develop- 
ers worldwide. The developers' 
work is managed from one data 
center that requires only four 
administrators, he said. 



Melinda-Carol Ballou, a 
program director with IDC, 
said there is a growing need for 
integration across change, sys- 
tem service and demand man- 



agement products. 

"In an industry where com- 
pliance seems to touch every 
aspect of IT, the ability to 
demonstrate control over the 



software change process is 
being mandated by businesses 
to support governance and cor- 
porate compliance initiatives," 
Ballou said. I 
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TopCoder goes direct to bottom line 



BY DAVID RUBINSTEIN 

To lower the cost of software 
development on demand, 
crowdsourcing champion Top- 
Coder is launching TopCoder 
Direct, a portal through which 



companies can either create 
contests for work they need 
done, or to find and use existing 
components. 

TopCoder is perhaps best 
known for its TopCoder Chal- 



lenge, through which it offers 
big prize money for projects 
that best meet contest require- 
ments. TopCoder today has 
more than 170,000 total regis- 
tered members, according to 



company co-founder and COO 
Rob Hughes. The vast majority 
are developers or college stu- 
dents in development pro- 
grams, Hughes said, adding that 
the company has seen its great- 
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est growth in China and India. 

The new software contests 
work the same way as Top- 
Coder's own contests: A compa- 
ny or individual posts the 
requirements for the software it 
needs developed (whether a 
user interface, a widget or 
something more full-blown), 
and developers within the com- 
munity create potential solu- 
tions. If the company chooses a 
solution from among the sub- 
mitted entries, it pays the con- 
test fee to the winner. 

The company can see how 
each developer submitting a 
solution is rated within the 
community to help it make a 
better-informed selection. An 
audit trail and collaboration 
capabilities make the experi- 
ence manageable and more 
efficient, Hughes said. 

Companies or individuals 
using TopCoder Direct pay a 
flat monthly fee for access to its 
generic component catalog. 
Those who launch contests 
might accrue costs beyond the 
platform access fee, Hughes 
said. The model gives Top- 
Coder customers an alternative 
to the more traditional, hourly 
billing structure employed by 
consultants, project managers 
and developers. 

The new website already is 
hosting several projects and was 
to be officially launched on Oct. 
30 at the Software Business 
Conference in San Francisco. 

Hughes acknowledged that 
there remains resistance to sim- 
ply reusing code created by 
someone else. "But we're bank- 
ing on resistance melting away 
in the face of the high cost of 
new development," Hughes 
said. "This method of creating 
software adds scale and profi- 
ciency gains not seen in other 
models." 

Hughes said he's seeing 
increased demand on the cus- 
tomer side for projects involv- 
ing AJAX, Python and Ruby, 
for which companies might not 
have experienced staff on hand. 
Widget development and Face- 
book or iPhone apps are new 
channels for capturing cus- 
tomers, he noted, but without 
the skills to develop those 
applications, companies could 
miss out on the business oppor- 
tunity. 

From TopCoder's perspec- 
tive, TopCoder Direct is a way 
to grow its platform and com- 
munity, Hughes pointed out. 
"We're not looking to create a 
stable of high-paid consul- 
tants," he said. I 
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WebSphere update, four years in 
making, is now more 'pluggable' 



BY DAVID WORTHINGTON 

Sometimes slow and steady wins 
the customer. IBM has deliv- 
ered the first major release of 
WebSphere Application Server 
(WAS) in four years, WAS 7. It 
introduces support for more 
development frameworks and 
standards, in addition to new 
management capabilities. 

WAS 7 became generally 
available last month. It imple- 
ments Enterprise JavaBeans 3.0, 
Java EE 5, the Java Persistence 
API, Java Development Kit 6.0 
and the Spring Framework, and 
it broadens support for WS-* 
Web service specifications, said 
Marisa Shumway, director of 
WebSphere application servers 
at IBM. Big Blue also targeted 
Web service performance. 

Runtime provisioning and 
OSGi-enabled dynamic deploy- 



ment reduce startup times and 
resource consumption to the 
bare minimum set of WAS ser- 
vices that are required by an 
application. "This aligns WAS 
with the trend toward a plug- 
gable architecture, which was 
pioneered by Iona Technolo- 
gies and JBoss, and is now 
adopted by all major vendors," 
noted Gartner analysts Yefim V. 
Natis and Massimo Pezzini in a 
September 2008 report, "IBM 
Adds Java EE Support in Web- 
Sphere Application Server 7." 

WAS 7 also introduces new 
management functions for mul- 
ti-component applications, said 
Shumway. Other changes are 
designed to make controlling 
applications more efficient and 
flexible. 

Cutting-edge requirements 
are available through optional 



feature packs, which introduce 
functionality for Web 2.0- style 
interfaces or Service Compo- 
nent Architecture. WebSphere 
Extended Deployment add-ons 
provide for more advanced 
capabilities including applica- 
tion visualization, extreme 
transaction processing, high- 
performance computing. 

Developers will be able to 
consume new features and tech- 
nologies as they become avail- 
able without having to wait for a 
new release of WAS through fea- 
ture packs, said Shumway. 

"IBM has adopted a cau- 
tious, stepwise evolution strate- 
gy for WAS. This reflects the 
maturity of the product and the 
increasingly conservative 

nature of its large installed 
base. These users are more 
concerned about operational 



efficiency and nonstop avail- 
ability than breakthrough inno- 
vation or the latest standards," 
Natis and Pezzini wrote. 

Gartner expects that IBM 
will begin to realign its entire 
WebSphere stack (including 
WebSphere Portal, WebSphere 
Process Server and WebSphere 
Enterprise Service Bus) over 
the next 15 to 18 months, 
according to the report. 

IBM's Shumway said WAS 7 
will run applications developed 
in versions of Java Enterprise 
Editions back to JEE 1.2. 

Regardless, Gartners report 
noted that users will have to deal 
with multiple versions of WAS 
for the next two to three years 
due to operational complexities, 
"despite the new, but unproven, 
WAS V7 features specifically 
addressing this scenario." I 



Microsoft eyes 'democratization' of business intel 



BY DAVID WORTHINGTON 

The next version of Microsoft 
SQL Server, code-named Kili- 
manjaro, will let end users build 
managed business intelligence 
solutions from transactional 
and stored data. 

At the Microsoft Business 
Intelligence Conference in 
Seattle, the company an- 
nounced Gemini, an effort to 
integrate self-service analytics 
into its data platform. While the 
Gemini component will let 
users tailor business analytics to 
suit their needs, IT will retain 
control over data access and 
sharing, said Fausto Ibarra, 
director of product manage- 
ment for SQL Server. 

Gemini will include master 
data management (MDM) 
technology through which "IT 
can make certain authoritative 
data sources available," Ibarra 
said. Data sources could include 
any JDBC- or ODBC-accessi- 
ble database, as well as SAP 
line-of-business applications. 

Microsoft acquired the 
MDM technology via its June 
2007 purchase of Stratature. 

Gemini will also access trans- 
actional data from Web services 
and correlate it in real time. 
According to Ibarra, data will be 
processed in memory, with 
capability for processing up to 
10 million rows per second. 
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With Excel as its interface, Gemini will enable users to pull business analytics tailored to their needs. 
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Microsoft Excel will be the 
rich client for Gemini; Share- 
Point and Excel Services will 
provide for remote access and 
peer ratings of reports. Reports 
will likewise be configurable as 
data services, Ibarra said. 

Traditionally, "BI has served 
only about 20% of an organiza- 



tion," said Kristina Kerr, senior 
product manager for Business 
Intelligence at Microsoft. 
"There are still gut-feeling deci- 
sions being made." 

She added that "elitist" tools 
have prevented the "democrati- 
zation"' of business intelligence 
and that Microsoft would make 



it more accessible. 

Customers will see a commu- 
nity technology preview (CTP) 
of Gemini within a year, Ibarra 
noted. In that same timeframe, 
the company will release CTPs 
of business intelligence appli- 
ances resulting from Microsoft's 
July acquisition of DATAllegro. I 



SAFECODE 
GIVES GUIDE 
TO SECURITY 

< continued from page 5 

states. "For example, rather than 
wait for an analysis tool to poten- 
tially find injection vulnerabili- 
ties, it's better for a development 
team to realize that their prod- 
uct may be vulnerable to these 
issues and put in place defenses 
and coding standards to reduce 
the risk from the start." 

To ensure security in the 
programming phase, SAFE- 
Code members said they mini- 
mize unsafe function use, work 
with static and dynamic analysis 
tools, do manual code review, 
and validate input and output. 

Testing methods used by 
SAFECode members include 
fuzz testing, penetration testing 
and using automated testing 
tools. Fuzz testing uses inten- 
tionally malformed data to see 
how the software responds 
when given that data. 

The code integrity phase 
should consist of least-privilege 
access, separation of duties and 
a chain of custody. Finally, the 
guide states that before deploy- 
ing software, administrators 
should know the "security pos- 
ture" of the software, including 
which ports to allow through a 
firewall or when to allow oper- 
ating system changes to make 
the software work correctly. 

"By collecting and analyzing 
the secure development meth- 
ods currently in practice across 
SAFECode members, we are 
able to offer others in the indus- 
try advice for improving software 
security," said Michael Howard, 
principal security program man- 
ager with Microsoft's Trustwor- 
thy Computing Group. I 




SafeCode's guide goes beyond theory 
to identify proven security methods, 
says executive director Kurtz. 



20 



NEWS 



Software Development Times . November 1, 2008 



www.sdtimes.com 



Open-source Fuse ESB 'hardens' Apache work 



BY DAVID RUBINSTEIN 

Progress Software has issued its 
first open-source product, 
releasing Fuse ESB 4.0 last 
month after completing its 
acquisition of middleware com- 
pany Iona Technologies. 



Fuse ESB 4.0 is the com- 
mercial version of the Apache 
ServiceMix enterprise service 
bus. Progress vice president 
and general manager of open 
source Larry Alston called Fuse 
ESB "a battle-hardened version 



with one vendor for support 
and consulting, but benefiting 
from community develop- 
ment." ServiceMix is based on 
the Java Business Integration 
specification that provides an 
approach for implementing a 



service-oriented architecture. 

Alston said Progress employs 
the project management com- 
mittee chairs and architects 
behind ServiceMix, including 
the ActiveMQ message broker, 
the Camel integration frame- 




Strat&gic legacy applications are fast powerful, and sometimes irreplaceable. Like a classic car, 

these applications perform best when maintained with the right tods, 
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work and the CXF services 
framework projects, giving the 
company the ability to influence 
key features within the specifi- 
cations. "We're taking stable 
baselines, hardening them and 
making them enterprise-ready," 
Alston said. "The Apache Foun- 
dation is a meritocracy, and one 
or two people can hold up a pro- 
ject. The community delivers 
high-quality, vetted pieces of 
software, but Apache isn't good 
at certifying, branding and bat- 
tle-hardening." 

This release of Fuse ESB 
includes Fuse EIP, a set of 
Enterprise Integration Patterns 
(www.eaipatterns.com) that 
Alston explained are graphical 
icons used to describe integra- 
tion solutions. The release also 
includes a Mediation Router 
runtime engine for integration 
patterns that drop inside the 
ESB. Progress also adds 
installers and documentation, 
Alston said, noting too that the 
company is building out FUS- 
Esource.com, a community 
website with resources regard- 
ing the bus. I 

Ciyital creates 
Java analysis 
rules for Fortify 

BY JEFF FEINMAN 

App security company Cigital 
has written a set of Java static 
analysis rules for Fortify Soft- 
ware's Source Code Analyzer. 

Java Security Rulepack 1.0 
adds 64 vulnerability categories 
to Fortify's base of more than 
315 categories for 17 languages, 
Cigital executives said. The rules 
in the product are open source, 
and users can modify the imple- 
mentations as they please. That 
can reduce the number of false 
positives in an organization, 
according to Cigital. 

Security checks in the Java 
Security Rulepack include Java 
EE and Struts misconfiguration 
checks, cryptographic usage 
checks, credential protection, 
and code quality. The rule pack 
works with Source Code Ana- 
lyzer version 4.5 or later. 

Among the 64 rules in the 
Java Security Rulepack are the 
removal of empty try-catch 
blocks that handle code, require- 
ments for cryptographic-key 
lengths of 128 bits to ensure data 
integrity and confidentiality, and 
avoidance of hard-coded user 
names and passwords in Castor 
configuration files. I 
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IBM team to help ISVs use cloud computing 



BY JEFF FEINMAN 

IBM is helping ISVs and soft- 
ware producers adopt cloud 
computing as a way to build and 
distribute products. 

In discussing what services 
IBM is offering for cloud com- 
puting, Bethann Craig, director 
of product management for 
IBM Lotus, said the company is 
figuring out APIs that its part- 
ners can use in their own appli- 
cations they put into the market. 
Craig said IBM has a research 
group called the ISV and Devel- 
oper Relations team that works 
with ISVs on hosting cloud- 
based services. 

The team offers ISVs white 
papers, online demos and down- 
loadable code for building appli- 
cations. It gives out "technical 
blueprints" and tells them what 
pieces of middleware might help 
take an application to market. An 
on-demand version of Rational 
AppScan checks Web applica- 

TIBCO MOVES CEP 
TO MAINSTREAM 

BY DAVID WORTHINGTON 

In a bet that complex event pro- 
cessing (CEP) is more of a 
Swiss Army knife than a niche 
technology, TIBCO Software 
has positioned its latest CEP 
software for mainstream use. 

BusinessEvents Enterprise 
Suite 3.0 adds sundry features 
for editing business rules and 
querying events, and it incorpo- 
rates architectural changes that 
increase scalability. 

Version 3.0 introduces a user 
interface that lets business users 
create, modify and deploy busi- 
ness rules in real time without 
relying on IT, said Rourke 
McNamara, TIBCO s director of 
product marketing. 

TIBCO has also added a lan- 
guage similar to Object Query 
Language that lets BusinessEv- 
ents users query events as they 
occur. 

Architectural changes allow 
monitoring up to twice as many 
events per second than it could 
previously, McNamara said. 
Performance depends on rule 
complexity and the event's size. 

"The sophistication of [cus- 
tomer] solutions has shifted in a 
significant way," he said, citing 
trends in CEP usage. "The 
changes in solutions customers 
are implementing are more ex- 
citing than our own changes." I 



tions for security bugs. 

"[ISV and Developer Rela- 
tions] does things on the middle- 
ware side, helping you under- 
stand how DB2, for instance, can 
benefit you when building an 



application," Craig said. 

One of the main cloud com- 
puting services that IBM rolled 
out last month is an open beta 
of Bluehouse (bluehouse 
.lotus.com), a social networking 



service that "marries" IBM 
Lotus social networking capa- 
bilities with online meeting ser- 
vices. Bluehouse offers file- 
sharing forms for group surveys 
and instant messaging. 



IBM also released last 
month Lotus Sametime Unyte 
(www.unyte.net), a Web confer- 
encing service for sharing docu- 
ments, presentations and appli- 
cations through any Web 
connection. Craig claimed the 
main benefit of Sametime 
Unyte is how easy it is to access 
meetings. I 



Intellectuals solve problems. 
Geniuses prevent them. 



— Albert Einstein 
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LoadRunner wins again in Testers Choice Awards 




BY JEFF FEINMAN 

This year's Software 

Test & Performance 

Testers Choice awards 

saw Hewlett-Packard's 

LoadRunner come away with the most 

votes overall for the second straight year. 

LoadRunner was voted the top 
choice in the Data/Test Performance, 
Load/Performance Test and Java 
Test/Performance categories, along with 
a runner-up nod in the .NET Test/Per- 
formance group. 

The tool has actually won the top hon- 
or for the third time; in 2006, it was 
under the Mercury Interactive label, 
which HP acquired that year. For a com- 
plete writeup of all the winners, read the 
article at www.stpmag.com/testerschoice 
/index.htm.l 



CATEGORY: Data/Test Performance 
WINNER: HEWLETT-PACKARD LOADRUNNER 

RUNNER-UP: Compuware File-AID/CS 
RUNNER-UP: Red Gate SQL Data Generator 

CATEGORY: Functional Test 
WINNER: HEWLETT-PACKARD QUICKTEST 
PROFESSIONAL 

RUNNER-UP: IBM Rational Function Tester 
RUNNER-UP: Borland SilkTest 



CATEGORY: Static/Dynamic Code 
Analysis Solution 
WINNER: IBM RATIONAL SOFTWARE 
ANALYZER DEVELOPER EDITION 

RUNNER-UP: Eclipse Test and Performance Test 

Platform 
RUNNER-UP: Hewlett-Packard Devlnspect 

CATEGORY: Test/QA Management 
WINNER: HEWLETT-PACKARD 
TESTDIRECTOR FOR QUALITY CENTER 

RUNNER-UP: Borland SilkCentral Test Manager 
RUNNER-UP: IBM Optim Test Data Management 
Solution 

CATEGORY: Defect/Issue Management 
WINNER: HEWLETT-PACKARD 
TESTDIRECTOR FOR QUALITY CENTER 

RUNNER-UP: Microsoft Visual Studio Team Edition 

Software Tester 
RUNNER-UP: Mozilla.org Bugzilla 

CATEGORY: Load/Performance Test 
WINNER: HEWLETT-PACKARD LOADRUNNER 

RUNNER-UP: IBM Rational Performance Tester 
RUNNER-UP: Borland SilkPerformer 

CATEGORY: SOA/Web Services Test 
WINNER: IBM RATIONAL TESTER FOR 
SOA QUALITY 

RUNNER-UP: Hewlett-Packard QuickTest 

Professional 
RUNNER-UP: Parasoft SOA Quality Solution 



CATEGORY: Security Test 
WINNER: IBM RATIONAL APPSCAN 
STANDARD EDITION 

RUNNER-UP: Hewlett-Packard Assessment 

Management Platform 
RUNNER-UP: Hewlett-Packard Weblnspect 

CATEGORY: Test Automation 
WINNER: HEWLETT-PACKARD QUICKTEST 
PROFESSIONAL 

RUNNER-UP: Compuware TestPartner 
RUNNER-UP: Hewlett-Packard Business Process 
Testing 

CATEGORY: SCM/Build Management 
WINNER: MICROSOFT VISUAL SOURCESAFE 

RUNNER-UP: Subversion 

RUNNER-UP: Electric Cloud Electric Commander 

CATEGORY: Embedded/Mobile 
Test/Performance 
WINNER: PARASOFT C++ TEST 

RUNNER-UP: QualiSystems TestShell 
RUNNER-UP: Coverity Prevent 

CATEGORY: .NET Test/Performance 
WINNER: MICROSOFT VISUAL STUDIO TEAM 
SYSTEM EDITION SOFTWARE TESTER 

RUNNER-UP: Hewlett-Packard LoadRunner 
RUNNER-UP: Compuware DevPartner Studio 



CATEGORY: Java Test/Performance 
WINNER: HEWLETT-PACKARD LOADRUNNER 

RUNNER-UP: JUnit 

RUNNER-UP: Eclipse Test and Performance 
Tools Platform 

CATEGORY: Integrated 

Test/Performance 

WINNER: MICROSOFT VISUAL STUDIO TEAM 

EDITION SOFTWARE TESTER 

RUNNER-UP: Hewlett-Packard Performance 

Center 
RUNNER-UP: AutomatedQA TestComplete 

CATEGORY: Commercial 

Test/Performance 

WINNER: PRAGMATIC SOFTWARE PLANNER 

RUNNER-UP: Mindreef SOAPscope Developer 
RUNNER-UP: Shunra Virtual Enterprise Desktop 
Standard 

CATEGORY: Free Test/Performance 
WINNER: ECLIPSE TEST AND 
PERFORMANCE TOOLS PLATFORM 

RUNNER-UP: JUnit 
RUNNER-UP: Mozilla.org Bugzilla 

CATEGORY: Best Solution From 

a New Player 

WINNER: VMLOGIX LABMANAGER 3.5 

RUNNER-UP: Fortify 360 

RUNNER-UP: Blueprint Reguirements Center 
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i Security 

CodeMeter deploys state-of-the-art encryption technologies for the 
maximum protection against illegal copies. The encryption keys are 
stored securely in the CodeMeter hardware. 

i License models 

Every license model, even complexe ones, can be built with 
WibuKey and CodeMeter. 



Order your Free Software Development Kit now! 
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i Options in the CmStick 

A license entry in the CodeMeter hardware is characterised 
by a Firm Code and a Product Code. 

i Special benefits of CodeMeter 

The user can employ the CodeMeter hardware for both a license 
manager and for storing sensitive data in a very secure way. 

i Programming of the hardware 

There are many attractive options for programming 

the CodeMeter hardware both within your company and at your 

customers' location. 
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Mega links business 
needs to app design 

System Blueprint supports BPMN, UML 2.0 



BY JEFF FEINMAN 

Enterprise architecture and business 
process analysis provider Mega has 
fielded System Blueprint, a modeler that 
supports Business Process Modeling 
Notation (BPMN) and links business 
requirements and application design. 

Terence Lee, Mega's vice president 
of North American operations, noted 
that there are management-level and 
identification-level business require- 
ments. System Blueprint can integrate 
with requirements management prod- 
ucts such as Telelogic's DOORS to relate 
requirements to business operations and 
application components, Lee said. 

"Those relationships are identified 
and supported in the Mega modeling 
suite," Lee said. "Within Mega, you can 
clearly see that a service ties back to 15 or 
20 business requirements, for example." 

System Blueprint follows the princi- 
ples of BPMN and UML 2.0. Lee said 
BPMN is beneficial because it offers 
both process and systems notation. 

System Blueprint can work with 
Web Services Description Language 



for exporting service component inter- 
faces, and it integrates with XML Meta- 
data Interchange 2.1 for exporting 
specification data. Mega IT Planning, a 
new module in System Blueprint, is 
used for application life-cycle manage- 
ment and can merge disparate applica- 
tions, Lee said. 

System Blueprint is part of the inte- 
grated Mega modeling suite, which 
offers process architecture, system blue- 
printing, IT planning and data modeling. 
Those modules share a repository, meta- 
model and object structure. 

The Mega approach "is unique com- 
pared with other products in that it cov- 
ers the full spectrum of analysis design 
and specification," Lee said. "If you take 
a tool like CA's ERwin, it does data mod- 
eling very well, but it does a really poor 
job of relating applications to the 
processes they support. So if you try to 
understand the impact of changing data 
in ERwin to a business process, you real- 
ly can't do it. With Mega, our approach 
enables impact analysis regardless of the 
perspective you're looking for." I 
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With activePDF Server™, you gain full control over your PDF output with conversion 
options that allow you to specify page size, compression and resolution options, 
embed text, create bookmarks, concatenate to existing files, and more. Licensed 
per server, you can easily add PDF generation to virtually any Windows application. 
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With activePDF Toolkif's form-filling capabilities, you can dynamically populate 
PDF forms with data and images from a database, allow users using only Adobe 
Reader to fill-in and save forms and use PDF forms as document templates to 
precisely control image placement and resizing. With Toolkit's robust API, the 
automation of virtually any PDF manipulation task becomes possible - append, 
stamp, stitch, merge, paint, secure PDF and more. 
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Do you need to standardize PDF output within your enterprise? With DocConverter™ 
you can easily use built-in support for "watched" folders to implement server-side 
PDF generation in a matter of minutes, with full control over the PDF output at the 
server level. Or, use DocConverter's programmable COM object to integrate 
convert-to-PDF functionality within your enterprise application. 
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Ensuring precise layout of an HTML document can be a nightmare, especially when 
printing. PDF guarantees pixel-perfect layout every time as what you see is what 
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HTML stream, or HTML file to PDF on the fly, while maintaining embedded styles. 
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Every day hundreds of millions of 
data caching operations are handled 
by ScaleOut StateServer - routinely, 
seamlessly, and blazingly fast. 

Linear scalability and high-availability 
are why ScaleOut StateServer has 
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production servers today, running 
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grid, let ScaleOut StateServer 
help you reach peak performance. 
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Building the right team and fostering a culture of continuous improvement and 
collaboration is the foundation for success. You also need the right tools and 
processes in place for your team to do their best work. That's where Microsoft 
Visual Studio Team System 2008 can help. 

Overcoming Application Development Challenges 

Whether you're part of an application development team, or a business stakeholder who de- 
pends on IT for business-critical applications, you know first-hand some of the many chal- 
lenges associated with application development. These challenges depend on the situation, 
but often include: 

• Managing shifting business requirements throughout the project 

• Communication gaps between project managers, developers and testers 

• Adequately testing applications for quality and reliability 

• Gaining visibility into project status to make trade-off decisions and to drive pre- 
dictable project delivery 

•Dealing with global development, regulatory and compliance challenges 

These are not simple challenges to overcome; many are interrelated and involve multiple 
team members and stakeholders. By systematically improving capabilities across your team, 
you can achieve dramatic improvements in your project success rates, better mitigate risks 
and increase your overall impact to the business. 

Visual Studio Team System can help your team overcome these challenges: 

• Communicate and Collaborate 

• Verifying Quality, Early and Often 

• Manage Team Workflow 

• Integrate Work Frequently 

• Use Familiar Tools 

• Make Real-Time Decisions 

• Drive Predictability 



Communicate and Collaborate 

Most software development teams use a number of stand-alone tools 
to manage the application life cycle. Specifications and requirements 
are stored on file shares or SharePoint sites; tasks assigned to devel- 
opers are managed using e-mail; bugs are tracked with spreadsheets; 
and source code resides in one or more version-control systems. With 
important information in so many different places, it's hard for team members to work to- 
gether effectively, resulting in additional effort and the potential for miscommunication. 



# 



Integrated Team Server 

Visual Studio Team System facilitates team-wide communication and collaboration by providing 
a unified repository for project data, along with the tools to define, enforce, and automate de- 
sired processes. At its heart is Visual Studio Team System 2008 Team Foundation Server, which 
supports version control, work item tracking, automated builds and quality checks, and more. 
Configurable process templates tie team activity together, with changes in status gathered auto- 
matically as part of everyday workflows. Automatic notifications keep team members informed 
of key events, such as a failed build. And with project information in one place and tied togeth- 
er, efforts are traceable back to initial requirements and stakeholders have real-time visibility 
into project status and quality. 

Support for Many Disciplines 

Team Foundation Server was designed to meet the needs of many members of the extended 
development team, not just software developers. Business analysts and architects can manage 
scenarios, requirements, and design documents; project managers and development leads can 
assign, track, and report on project status; database professionals can manage database 
schemas and deployment scripts; and testers can manage regression and load tests, determine 
test coverage, and keep a close eye on quality trends. The Visual Studio Team Explorer client 
provides team members with a single point of access to project artifacts and data, while a pre- 
built, customizable SharePoint portal extends the same information to remote team members 
and other project stakeholders. 

By bringing project artifacts, data, and status together in one place, Visual Studio Team System en- 
ables more effective team communication and collaboration. Defined and consistently enacted 
processes, full traceability, and built-in status reporting help maximize individual productivity, at the 
same time helping to ensure that the efforts of each team member remain well defined and aligned 
with the teams overall priorities. 



Verifying Quality, Early and Often 

Verifying quality is often neglected during most phases of the development 
process. Instead, it is measured near the end of the process, when code is 
handed off to be tested. This approach often results in extra work and a slip- 
ping schedule as features thought to be complete are pushed back to develop- 
ers for rework. Even if code passes initial QA tests, performance and scalability issues can re- 
main undetected until software is deployed into production. 
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A Quality-Centric Tool Set 

Microsoft Visual Studio Team System provides tools for verifying quality throughout the ap- 
plication life cycle, helping teams to deliver higher-quality software faster and with less re- 
work. From tracking requirements during planning to performance and load testing of the 
completed application, Visual Studio Team System provides the tools needed to improve 
many aspects of software quality. 

Focus on Quality throughout the Application Life Cycle 

The focus on quality begins during the planning phase, before the first line of code is writ- 
ten, when work item tracking helps thoroughly map scenarios to requirements. As architects 
design a solution that meets those requirements, tools such as the Application Designer, Dis- 
tributed System Designer, and Deployment Designer help ensure that the solution will deliv- 
er the necessary performance, scalability, and manageability. 

During development, before code is checked in, static code-analysis tools help identify cod- 
ing errors and potential security issues earlier, while performance profiling and hot-path 
analysis help avoid potential performance and scalability problems. Developers can easily 
create unit tests to validate application and database objects, using code coverage analysis 
tools to determine the completeness of those tests. Tools for examining code metrics can 
help gauge the complexity and maintainability of code. 

QA engineers can begin writing test cases and load tests earlier, mapping them to work 
items and managing test activity with Visual Studio Team System. As requirements change, 
full traceability between work items helps them ensure that test coverage remains complete. 
Prior to production deployment, comprehensive load-testing tools help QA engineers vali- 
date the application's performance and scalability as a whole. 

Visual Studio Team System enables development teams to improve quality throughout the develop- 
ment life cycle, not just near the end. Such an approach helps minimize the rework- and-retest 
"churn" that typically occurs near the end of each development iteration, during which tradeoffs on 
quality versus schedules must often be made — in turn helping to increase software quality, reduce 
time-to-market, and decrease overall development costs. 
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Manage Team Workflow 

Development teams deal with many different types of project artifacts, such 
as scenarios, use cases, requirements, developer tasks, change requests, test 
passes, and bugs. However, most teams lack a good way to manage those 
project artifacts, define the relationships between them, and trace those rela- 
tionships and the effects of status changes throughout the application life cycle. Team Founda- 
tion Server manages these project artifacts as work items so teams can better gauge progress to- 
ward goals and ensure that resources are not being wasted on unnecessary work. 

Detailed Work Plans 

Work item tracking in Microsoft Visual Studio Team System provides an efficient way to 
manage and monitor the status of project-related activity. Team projects have detailed work 
plans, with initial work items generated automatically based on process templates. Each 
work item typically has a title; a description; a team member to whom the work is assigned; 
and a current state, such as proposed, active, resolved, or closed. Work items can also have 
links to other work items, attachments, and custom fields. 

Work Item Visibility and Traceability 

With relationships between work items clearly defined and changes in the status of work 
items collected automatically, a team's progress-to-goals remains visible, even as work is 
handed off among team members. For example, a business analyst may break down scenar- 
ios into requirements, which a development lead divides into tasks for developers. As devel- 
opers finish the tasks, source code-control policies require them to associate their checked- 
in code with work items. Because those change sets are associated with each build, as a new 
build passes QA tests, stakeholders can see that, for example, 60 percent of the work re- 
quired to meet all project requirements is now complete. 

Work item tracking provides an efficient way to manage the efforts of team members, with full trace- 
ability back to initial project goals and real-time visibility into team progress. Team members will know 
how their assigned tasks are related to project goals as a whole, and project managers and leads can en- 
sure that no unnecessary work is assigned. And because all changes to work items are logged and fully 
auditable, those same capabilities can help address complex compliance and regulatory requirements. 



Integrate Work Frequently 

Another quality-related area where most teams see room for improvement is 
source code management and version control. One common issue is the in- 
tegration of individual developer efforts into the official code base, which 
can result in the all-too-frequent "broken build" — and force QA resources to 
sit idle until the issues have been resolved and a new build is ready to test. 
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Comprehensive Version Control 

Microsoft Visual Studio Team System helps solve these pains by providing a comprehensive, 
flexible, version-control system. This functionality is not a mere upgrade to Microsoft Visual 
SourceSafe version-control system; rather, the version-control capabilities of Visual Studio 
Team System Team Foundation Server were designed from the ground up to deliver the 
same scalability, performance, and reliability of its underlying data store, which is based on 
Microsoft SQL Server 2005 database software. Built-in tools aid in the migration of source 
code and change history from Visual SourceSafe. 

Some key version-control features in Visual Studio Team System Team Foundation Server in- 
clude atomic check-ins, which help maintain the integrity of source-code files, and policies 
that require developers to perform unit tests or static code analysis prior to checking in code 
and to associate all checked-in code with work items. Support for "shelving" code enables 
developers to store work in process on the server without checking it in, and a new "get lat- 
est on edit" feature checks for new code on the server when a developer starts to edit a local 
copy — -just in case someone else has made changes since the code was checked out. 

Powerful Build Server 

Version control in Visual Studio Team System is complemented by its Team Build features, 
including support for continuous integration builds every time someone checks in code. 
Unit tests and build verification tests can be run as part of the process, and if the build or 
tests fail, designated stakeholders are automatically notified. Flexible build definitions also 
help reduce the time spent managing scripts for "official" builds, providing the ability to eas- 
ily automate compilation, unit tests, static code analysis, virtual server configuration, Web 
site or Web services configuration, application installation, database deployment, test-data 
generation, and load tests. 

The version control and Team Build features in Visual Studio Team System help teams ensure quali- 
ty by enabling them to easily and frequently integrate the work of individual team members — and 
validate that the combined efforts work as expected. 



Use Familiar Tools 

Many development teams want an integrated solution for application life 
cycle management but also want to avoid the lost productivity associated 
with having to learn new tools. 






Make Use of Existing Tools and Skill Sets 

Microsoft Visual Studio Team System facilitates adoption by enabling team members to use tools 
that are already familiar to them. Project managers can design an itemized list of work items, as- 
sign those work items to developers, and track their completion using Microsoft Office Project 
Professional, or they can use Microsoft Office Excel spreadsheet software to make global changes 
and quickly reassess priorities. Architects, software developers, development leads, database 
professionals, and testers can continue to use the Visual Studio integrated development environ- 
ment, including Visual Studio 2008 Professional Edition or any of the Visual Studio Team Sys- 
tem Editions. Remote team members and business stakeholders can use Visual Studio Team Sys- 
tem Web Access to take advantage of many Visual Studio Team System features. 

Visual Studio Team System helps reduce "soft" adoption costs by integrating with the desktop appli- 
cations that people already know and use. Instead of having to learn new tools, team members can 
continue to use the tools that help them be the most productive. 

Make Real-time Decisions 

Regardless of the maturity of their processes, many development teams lack full visibility 
into the application life cycle — and thus they are unable to easily answer questions such as, 
"Does the application meet all requirements?" and, "Are we on schedule?" 

Business Intelligence for Development Teams 

Powered by an integrated Microsoft SQL Server 2005-based data warehouse, the business 
intelligence features in Microsoft Visual Studio Team System provide the information needed 
to make informed, real-time decisions with just a click on a link. And because SQL Server 
Reporting Services is the engine underlying Visual Studio Team System business intelligence, 
teams can just as easily customize existing reports as they can create new ones. 

One highly useful out-of-the-box report is Remaining Work, which provides a comprehen- 
sive view of all remaining work items, enabling development leads and project managers to 
easily see progress, identify bottlenecks, and, if necessary, reallocate resources. Another use- 
ful prebuilt report is Quality Indicators, which provides a combined view of unit test success 
rates, code coverage by unit tests, code churn, and active bugs — all tracked over time. 




Visual Studio Team System provides the information needed to make informed, real-time decisions 
on iteration planning, test coverage, bug trends, project schedules, resource allocation, and more — in 
turn helping development teams to deliver on time and on budget, and to ensure that projects meet 
all identified requirements. Project managers and development leads can be ready for team meetings 
in minutes instead of hours, saving everyone the effort of having to manually communicate status, 
and can answer questions posed by external stakeholders and upper management on the fly. 

Drive Predictability 

Most development teams recognize the value of consistent processes. Howev- 
er, they may not have such processes, know what they need, or know how to 
get started. Teams that have established processes may find that the processes 
are not consistently followed, or that adherence requires significant manual 
effort. Few teams have matured to the point that they can consistently and 
effortlessly follow established processes and, even if they have, must still deal 
with issues such as reorganization, new regulatory or compliance requirements, and bringing 
new team members up to speed. 

Defined and Consistently Followed Processes 

Visual Studio Team System includes integrated process templates to help teams deliver pre- 
dictable results, continuously improve and adapt, and more effectively collaborate and commu- 
nicate. The process templates are fully integrated with other Visual Studio Team System features, 
such as work item tracking and source code control, providing both the ability to define desired 
processes and the means for team members to productively work within those processes. 

Visual Studio Team System includes two out-of-the-box process templates: Microsoft Solu- 
tions Framework for Agile Software Development and Microsoft Solutions Framework for 
CMMI (Capability Maturity Model Integration) Process Improvement. Each provides a set of 
predefined work items, HTML-based process guidance, a SharePoint portal, and a set of pre- 
defined reports. Templates for additional methodologies such as Scrum are available in the 
Visual Studio Team System Developer Center on MSDN, the Microsoft Developer Network. 

Configurable and Adaptable Templates 

Although prebuilt process templates can provide a strong head start, they're not hard-coded. 
Teams can tailor them to support their own processes or can define new templates from 
scratch. Either way, the Process Template Editor makes it easy to create new types of work 
items, specify content for a work item type, define which work items are automatically gen- 
erated for a new project, and define the relationships between work item types. Teams also 
can customize process guidance, SharePoint portal layout, and reports. 

Visual Studio Team System can help development teams define, adopt, and enforce consistent 
processes. In turn, that improved predictability can help increase project velocity, accelerate develop- 
ment cycles, and facilitate more accurate estimation of those cycles, thereby helping teams to deliver 
results better, faster, and more consistently. 

Visual Studio and the Microsoft Application Platform 

The Microsoft Application Platform is a portfolio of technology capabilities, core products, 
and best practice guidance focused on helping IT and development departments' partner 
with the business to maximize opportunity. 

As one of the core products of the Microsoft Application Platform, Visual Studio can help 
you drive the right business efficiencies, customer connections, and value-added services by 
providing a single, fully integrated development environment for most types of develop- 
ment, including Microsoft Windows, Microsoft Office, Web, and mobile applications. Use 
Visual Studio development solutions to give your development team powerful ways to: 

• Increase productivity and quality through integrated and familiar tools. 

• Deploy, secure, and support your critical Web applications and infrastructure. 

• Reduce costs through better visibility of your development process. 

• Provide better predictability and planning through integrated process and 
methodology support. 

Ready to Share 
the Vision 

If you are ready to Share the Vision 
of Visual Studio Team System 2008 
contact your local Microsoft representative 
or Microsoft Partner and learn more at 
http://www.microsoft.com/teamsystem 
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Microsoft to ship jQuery with Visual Studio 



BY DAVID WORTHINGTON 

A popular open-source Java- 
Script library will ship with Mi- 
crosoft Visual Studio going for- 
ward. Microsoft will contribute 
to the project and will build 
new features into the .NET 



Framework that leverage it. 

Scott Guthrie, corporate 
vice president of Microsoft's 
.NET Developer Division, 
wrote on his blog (tinyurl.com/ 
4alke4) that the company would 
begin to bundle the j Query 



JavaScript library (jquery.com) 
with Visual Studio, unaltered 
and under its existing MIT 
open-source license. 

jQuery allows JavaScript 
developers to add AJAX to their 
projects, handle events, per- 



form animations and traverse 
HTML documents. 

Soon Microsoft will also 
begin shipping annotated ver- 
sions of the library that have 
Visual Studio IntelliSense code 
completion and help-text inte- 
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gration at design time, he wrote. 
The libraries will work with Visu- 
al Studio 2008 Express SP1 and 
Visual Web Developer 2008 
Express SP1, as well as being 
included with the ASP.NET 
MVC (Model View Controller) 
framework. MVC will add the 
library to new projects by 
default, according to Guthrie. 

Microsoft Product Support 
Services will begin to support 
jQuery later this year, he noted. 

"A big part of the appeal of 
jQuery is that it allows you to 
elegantly (and efficiently) find 
and manipulate HTML ele- 
ments with minimum lines of 
code. jQuery supports this via a 
nice 'selector' API that allows 
developers to query for HTML 
elements, and then apply 'com- 
mands' to them," Guthrie wrote. 
Other features that he found 
compelling are j Query's native 
animation APIs, which can be 
used as commands, and the abil- 
ity of jQuery commands to be 
"chained" together. 

Those and other characteris- 
tics, such as j Query's ability to 
find and manipulate HTML 
elements with few lines of code, 
prompted Microsoft's ASP.NET 
team to explore its use for sce- 
narios the included on the com- 
pany's ASP.NET AJAX road 
map, Guthrie wrote. The com- 
pany decided to use the library 
in lieu of duplicating its func- 
tionality because jQuery 
already supported the scenarios 
Microsoft was investigating, 
and it has a "huge" ecosystem 
and community built around it, 
he explained. 

"We thought, 'Wouldn't it be 
great to just use jQuery as-is, and 
add it as a standard, supported 
library in VS/ASPNET, and then 
focus our energy building new 
features that took advantage of 
it?'" Guthrie wrote. "We sent 
mail to the jQuery team to gauge 
their interest in this ... they 
thought that it sounded like an 
interesting idea too." 

In turn, the company will 
contribute bug fixes, patches 
and tests back to the jQuery 
open-source project through its 
standard process. 

Using jQuery is a non-stan- 
dard practice for many .NET 
developers, so Microsoft's Scott 
Hanselman, a senior product 
manager for .NET, published a 
tutorial (tinyurl.com/4j4cdl) for 
integrating jQuery with 
ASP.NET AJAX and ADO.NET 
Data Services. I 
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OutSystems suite offers inroad to agile 



BY JEFF FEINMAN 

OutSystems is fielding a suite of 
agile products that supports 
user feedback and offers AJAX 
development capabilities. 

The All-In-One Agile Suite 
includes Embedded Change 
Technology, an automated 
mechanism to collect and man- 
age user feedback and require- 
ments directly from a Web appli- 
cation. The company said users 
can click on an application they 
want to change and write com- 
ments in a pop-up window. Pro- 
ject managers and developers 
can review the feedback with the 

Xenocode app 
packs Java, 
.NET into VMs 

BY JEFF FEINMAN 

Application virtualization com- 
pany Xenocode has created a 
product that lets developers 
package Java, .NET and Win- 
dows-based applications into 
virtual machines on desktops. 

Virtual Application Studio 
ISV Edition doesn't require 
installation or setup, and it can 
capture a snapshot of an appli- 
cation, according to the compa- 
ny. Xenocode technology then 
builds a lightweight virtual exe- 
cutable that can run on any 
Windows desktop, regardless of 
operating system version or 
privilege restrictions. 

Kenji Obata, CEO of 
Xenocode, explained that appli- 
cation virtualization separates 
applications from their underly- 
ing operating system. Rather 
than copy the entire host oper- 
ating system like most virtual- 
ization products, Xenocode 
emulates only the relevant fea- 
tures of the core operating sys- 
tem for application execution. 

Virtual Application Studio 
can import application config- 
urations and application virtu- 
alization products such as 
VMWare's ThinApp client. 
Users with pre-packaged appli- 
cations can import those con- 
figurations without the need 
for recapture, according to 
Xenocode executives. 

"Unlike legacy deployment 
technologies such as MSI, 
Xenocode technology provides 
end users with an instant, reli- 
able experience while reducing 
development costs," Obata said. 

The product is available at 
www. .xenocode.com. I 



Agile Network, a portal that lets 
users access OutSystems' Agile 
project management tools and 
online training programs. 

"We've now got the ability to 
manage an agile project and 
integrate it completely with a 



platform from a standard 
Scrum-based agile approach," 
said Mike Jones, vice president 
of worldwide marketing for Out- 
Systems. "There's a project siz- 
ing and scoping tool in the Agile 
Network that leverages the con- 



cept of user stories and features. 
We bundle all that into this tool 
[so] that you can apply patterns 
to various elements of the user 
stories, and those patterns gen- 
erate estimates." 

Also available in the All-In- 



One Agile Suite is Agile Platform 
4.2, which offers simplified de- 
velopment and delivery of AJAX 
rich Internet applications. The 
platform can scale to environ- 
ments with millions of users, and 
integrate with legacy Oracle and 
SQL Server databases. 

The All-In-One Agile Suite 
will be available this month. I 





-py XML Editor 



Altova* XMLSpy* 2008 Is the world 1 s best-selling XML development environment for modeling, editing, 
transforming, debugging, and profiling ell XML technologies. Download a free If la I today! 



■ Support for very large XML files 

• Detailed find & replace in XML Schema editor 

• Enhanced XSLT details in Info Window 

• XSL Outline entry helper 

- Visual Studio support updated for VS 2006 

• Support for Java, C#. JavaScript and 
VBScript in stylesheets 

• And much more... 






XMLSpy provides unsurpassed compliance with the 
tatest industry standards. It even supports the new 
Ofl c* Open XML (OOXML) formats utilized by 
Microsoft* OH ce 2007. The advanced functionality 

fn XMLSpy is coupled with user-friendly views and 
entry helpers, wizards, and debuggers, helping 
developers create, edit, and optimize today's most 
advanced XML-based applications and Web services 
with ease. 



•XML editor 

• Graphical XML Schema / DTD editor 

• XSLT 1.0/2,0 editor, debugger, profiler 

• XQuer/ edtor, debugger, profiler 

• XPath 1 .Q/2.0 analyzer & buihter 

• Refationaf database support 

• Advanced XML validation features 

- Support for Office Open XML fites 
(.docx, .xlsx h pptx) 

■ SOAP client & debugger 

• Graphical WSDL editor 

■ Java> C#, C++ code gene ration 

• Text-based and graphical editing views 

■ Visual Studio & Eclipse integration 



a**. 



i=J5@ 

[ t* Ui ***** ft WW#i ****** Witt*, friM ff frrtrf JV I*™, wi* ^ #* E^.- tt* 

pitfafl.fiaj* s i »*-■■* ■ ft ^ CR„J !"* ^31 .. * L+J23Q 

Mi 

A 

* » The Agency 
Personnel File 







;SCj . . - loiter ■ 



" *■ 



1J ■ >mnnn*<Tr.|-'li4H is**!* IT' 

II I ■ [■■■*! -J W-M -H-tf-i^ 

u x>""--i;:-h ***** 




[*^&=*\{E*± 



>liv>rn*c<N«i»f«i :?.- 
■ PMiw IJa.-kSfl-TQfcl-.T ■,,- 
• L-niri-ELj 



1D -E4HfrM Kf**T 




ftbkmtm****-. m ^ 



^ tritahn J«t H*Oil~ ftJi-* 



gtjpciiwie ik»*«^ frriieMignJ i)^^ hp jamuni-iteygjbhi^ 



."-Z 1 !-^. 1 - 



ALTOVA' 



See wtiy XMLSpy is the choice of over 3 million top developers - 
Download a free, 30*day trlaT at www.altova.com 



28 



NEWS 



Software Development Times . November 1, 2008 



www.sdtimes.com 



Open-source Tokeneer shows software's in the proof 



< continued from page 1 

able recently as a demonstra- 
tion of what's required in a 
piece of perfectly reliable, bug- 
free and secure code. 

Rod Chapman, principal 



engineer at Praxis, said the 
Tokeneer project actually took 
only 260 person-days to com- 
plete and was ready in 2004, but 
the NSA's involvement slowed 
the rollout to a veritable crawl. 



In 2006, the team was allowed 
to speak at conferences on the 
project, and two years after that 
the work was finally made avail- 
able under a permissive license. 
Bureaucracy aside, AdaCore 



CEO and president Robert 
Dewar, speaking about the deci- 
sion to open-source Tokeneer, 
said it was "amazing to get that 
outoftheNSA." 

Tokeneer is purely a demon- 
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stration application. It runs on 
Windows, something that in 
practice would nullify many of 
the security claims made for the 
application, Dewar and Chap- 
man both acknowledged. Were 
it deployed in the wild, Toke- 
neer would likely live on a small 
embedded system that would 
control a biometrically activat- 
ed security door. The software 
is designed to take in security 
credentials from a fingerprint 
reader or key card, and then 
control the door mechanism 
based on those credentials. 

It's a fairly simple problem 
for standard software, but Ada- 
Core, Praxis and the NSA 
weren't looking for standard. 
They wanted perfect. 

To get flawless software, 
Chapman and Dewar said, the 
only place to develop was in the 
U.K., where formal methods of 
coding are more commonly used. 

"It's another demonstration 
point in what's [been] a remark- 
able sequence of demonstration 
projects showing that formal 
methods can be used in a practi- 
cal way," said Dewar of Toke- 
neer. "There was a huge interest 
20 years ago in proof of correct- 
ness — the idea that you wouldn't 
test your programs, but you'd 
prove them correct using mathe- 
matical proof. It was oversold, 
especially in the U.S. The U.S. 
overreacted by thinking this was 
not a practical technology." 

But that technology is at the 
core of Praxis' Spark, a frame- 
work designed around reliability, 
security and provability. Chap- 
man and two coworkers actually 
wrote Tokeneer on Spark and 
used mathematical proofs to 
show that there were no buffer 
overflows or other anomalies. 
Spark, said Chapman, prevents 
developers from making such 
errors during coding and can 
offer assurance that the software 
is perfect. 

Ada was chosen for the pro- 
ject because "there is not any 
other basis for building such a 
powerful technology," Chap- 
man responded. 

Dewar noted that Ada "has 
settled into a niche of high-reli- 
ability programs. Most new 
avionics systems are Ada-based, 
including the Boeing 787. Ada 
was designed for that purpose." 

Tokeneer, along with a com- 
prehensive description of the 
project and its development, is 
available at adacore.com. I 
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Python 3.0 marks a clean break from its past 



< continued from page 1 

Print statement is being 
changed: It's now a full-blown 
function. 

"One of my issues with 
changing the Print statement 
that made me step back was, 
you know, on your first day 
learning to program, you write 
'Hello World!' We just broke 
'Hello World!' " 

But the Print statement was 
constantly being shoehorned 
into odd behaviors it was inca- 
pable of performing on its own. 
Aside from its use by newbies 
learning how to program, Print 
is typically used for debugging 
purposes, Hettinger said. That 
meant a number of hacks had to 
be concocted over the years to 
output program errors for log- 
ging files. Print can handle such 
needs with more elegance as a 
function than it could as a state- 
ment, said Hettinger. The 
Python 3.0 team even piped in 
log functionality with a specific 
Print modifier. 

Andrew M. Kuchling, a 
Python contributor who has 
been focusing on 2.6, pointed 
to a few updates in that release 
that are compelling even for 
users who aren't on the road to 
3.0. They include JavaScript 
Object Notation support, a 
"multiprocessing" command 
and the addition of the plistlib 
on non-Apple-operating-system 
compiles of Python 2.6. 

Some of those features may 
even be backported to Python 
2.5, perhaps for a 2.5.3 release, 
said Kuchling. Likewise, there 
could be fixes for 2.6 in the 
future. In essence, however, 2.6 
is the last major branch of what 
will soon be known as the old 
Python. 

Hettinger said he's been writ- 
ing a lot of code in 3.0 and hopes 
the developer community will do 
the same. While 2.6 was brought 
out early to make it into Apple's 
forthcoming release of Mac OS 
X 10.6, Python 3.0 won't arrive 
until Dec. 3. Hettinger said the 
3.0 development team wanted to 
take a few months to listen to 
users in the field. 

Hettinger thus encourages 
Python coders to play with 3.0, 
which is available at python.org. 
Many of the changes should 
make their lives easier, he added. 

"One of the nicest differences 
between 3.0 and 2.x Python is 
[that the former] is cleaner all 
the way across the board," said 



Hettinger. "Python used to be 
filled with little special-case 
rules. We've always had com- 
plaints about the standard 
library. We had a ton of modules 
that were obsolete. But we 



couldn't take them out because 
people were relying on them. 
For the most part, all of those are 
gone. So 3.0 is easier to learn." 

The 2.6 revision is complete- 
ly compatible with Python 2.5 



programs and should run earli- 
er versions as well. To smooth 
the shift to 3.0, 2.6 includes 
text-based conversion tools to 
take care of simple changes and 
a scanner program to alert the 



developer to potential pitfalls. 

Hettinger said, "In Python 
2.6, there's a command-line 
option when you run Python 
with a '-3'; if it will give a differ- 
ent result in 3.0, it gives a warn- 
ing. That means you can get to 
error- free [code]. It tells you, 
'Change this line, this line, this 
line.' " I 
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Mono 2.0 brings innovations to CLI 

Unique features could put Microsoft in position of having to play catchup 



< continued from page 1 as [the Mono team] could get its implementation that it will developer platforms at 

He acknowledged that Mono it." Meanwhile, the team did contribute to the CLI through Microsoft, said the company "is 

2.0 is not an exact duplicate of more than just copy .NET: It Ecma, de Icaza said. an active participant on the 

.NET but said it comes "as close added some unique features to Brian Goldfarb, director of [Ecma-335] committee, and we 



"In some projects we have five simultaneous 
database environments to keep in synch. 
I downloaded the SQL tools from Red Gate and the 
next 14 days were the best SQL days in my life." 

G. Haraldsson Kaupthing Bank 



"SQL Compare and SQL 
Data Compare synched 
30,000 product lines and 
the 12 associated tables 
in less than 20 minutes 
- a task that takes 
the best part of 
a day manually!!! 
Go try it and buy it 
NOW." 

Paul Cooke Boretec IT Ltd 



"SQL Compare and SQL Data 
Compare are the best purchases 
we've made in the .NET/SQL 
environment.. .We rely on these 
products for every deployment." 

Paul Tebbutt Technical Lead, Universal Music Group 



"I am literally staggered at 
how much more efficient 
it is to perform simple 
data transportation with 
SQL Data Compare. In 
some cases, it's up to 10 
times faster with SQL Data 
Compare than it would be 
with DTS." 

Nick Stansbury SAGE Partners Ltd 



"Red Gate's SQL Data Generator has 
overnight become the principal tool we use 
for loading test data to run our performance 
and load tests." 

Grant Fritchey Principal DBA, FM Global 



"SQL Prompt is a must-have 
tool for all T-SQL developers." 

Brian Brewder Brian Online 



"There are times that I love this 
business - this would be one 
of them. Because without SQL 
Compare, and given 700 rows 
in sysobjects plus 13,000 rows 
in syscolumns in the production 
db, it would've taken me hours 
to find... Now, what to do with 
the rest of my day :-)" 

Mark McGinty Database Analyst/Consultant 



"I used SQL Compare with a previous employer 
and loved it so much I brought the experience 
here. This time, we bought the whole package. 
Love it!" 

Jim Franklin Lead Solutions Developer, J2 Aircraft Dynamics 
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The Red Gate SQL Toolbelt makes developers and DBAs talk. 
Our tools make you very fast and very accurate and this is clearly 
news that's worth passing on. Download a free trial of the most 
talked about tools for SQL Server. You'll save your company so 
much time you might find you want to share the news. 
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are delighted to have others — 
including our partners at Novell 
and others in the industry — 
participating." He added that 
Microsoft is committed to 
openness with .NET and that it 
fully intends to support all evo- 
lutions of the CLI specification 
with subsequent releases of the 
.NET Framework. 

"It does not behoove Micro- 
soft to adopt a siege mentality 
toward open source," said Lau- 
ra DiDio, a principal analyst 
with Information Technology 
Intelligence. "They have to be 
flexible and not alienate enter- 
prise customers that want inter- 
operability." 

Returning to a familiar pat- 
tern, subsequent releases of 
Mono will continue to validate 
against .NET The Mono project 
has received test suites for the 
Common Language Runtime 
(CLR), Microsoft's implementa- 
tion of the CLI, consequent to 
its partnership with Microsoft to 
create Moonlight, a Linux run- 
time for Microsoft's Silverlight. 
Mono Moonlight 2.0 is based 
on Silverlight 2, which is a 
derivative of the CLR designed 
for the Web. Microsoft is pro- 
viding the Mono project with 
technical assistance for Moon- 
light, said de Icaza. 

Going forward, de Icaza 
said, Mono will pursue a quar- 
terly release schedule. Upcom- 
ing versions will improve the 
performance of the Mono code 
generation engine and offer 
integration with Microsoft 
Visual Studio, he noted. 

Other additions to the Mono 
feature set will take longer to 
bake because Microsoft has not 
contributed elements from 
.NET 3.5 back to Ecma, de 
Icaza said. Those include 
LINQ, Windows Communica- 
tion Foundation (WCF), Win- 
dows Workflow Foundation and 
Windows Presentation Founda- 
tion (WPF), he said, suggesting 
that Microsoft should con- 
tribute LINQ back to Ecma. 

Microsoft did not respond to 
requests for further comment 
by press time. 

The Mono project will begin 
working on a facsimile of WCF 
next year, according to de Icaza. 

"WCF is the easiest to work 
out," he said. "WPF is the least 
sought [by developers] because it 
is a clear break from the past." I 
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Dial M for modeling with Microsoft's Oslo initiative 



< continued from page 1 

Object Modeling Group. 

By default, models that are 
written in DSLs are serialized 
from the Oslo repository into 
XAML, which Microsoft will 
use as its markup language and 
the executable model for the 
.NET framework, Wahbe said. 
".NET executes XAML as a 
first-class citizen, and there is 
internal consistency for devel- 
opers to leverage." 

According to Wahbe, the 



Oslo repository, which is based 
on SQL Server, will function 
like a database that's accessible 
to developers via Microsoft 
Access or report writers. How- 
ever, Quadrant is the "flag- 
ship" tool for creating rich 
views, he noted. 

Indeed, Microsoft intends to 
make the experience as seam- 
less as possible throughout its 
own stack. An update to Win- 
dows Server, code-named 
Dublin, permits the XAML- 



based format to be executed on 
Windows Server. 

M broadly captures data in a 
high-level declarative way, 
Wahbe explained. Consequent- 
ly, downstream tools such as 
Microsoft System Center will 
utilize metadata from models 
for configuring applications. 

'WHAT' VS. 'HOW 

"M models the 'what' as 
opposed to the 'how'; the sys- 
tem specifies the how," said 



Wahbe. For example, it would 
be up to a systems administra- 
tor to set parameters for a ser- 
vice-level agreement through 
policy. Metadata can also be 
used in other non-executable 
domains, such as describing a 
house, he noted. 

Visual Studio Team System 
2010 will leverage M to provide 
multiple views across rules and 
to map physical architecture to 
assets. 

The programming model for 



MICROSOFT CO-SPONSORS ECLIPSE PROJECT FOR SILVERLIGHT 



BY DAVID WORTHINGTON 

Microsoft is throwing its support 
behind the creation of an Eclipse 
project to integrate the IDE with 
Silverlight technology. 

The proposed project (www 
.eclipse.org/proposals/sldt), Sil- 
verlight Development Toolkit 
(SLDT), was submitted by 
open-source solution developer 
Soyatec and is being co-spon- 
sored by Microsoft. The project 
objective is to foster cross-plat- 
form Silverlight development 
through Eclipse. 



To that end, the proposal 
outlines the creation of a suite 
of Eclipse plug-ins for Sil- 
verlight application develop- 
ment and integrating Silverlight 
applications with Java-based 
websites and services. Proposed 
plug-ins would provide con- 
troller class editors for C# and 
JavaScript, Silverlight project 
creation and resource manage- 
ment, and a visual XAML edi- 
tor with code completion. 
Build, run and debug tools 
would also be included. 



SLDT will leverage compo- 
nents of the Eclipse Web Tools 
Platform to provide such fea- 
tures as the building and launch- 
ing of applications, code genera- 
tion, source code management, 
and project creation and res- 
ource management, according to 
the project's website. It will also 
extend Eclipse's HTML, Java- 
Script and XML editors. 

The Silverlight and XAML 
projects created by Eclipse will 
be fully supported by both 
Visual Studio and Microsoft 



Expression Studio tools, 
according to a Microsoft fact 
sheet (tinyurl.com/3zjn6w). 
The company would not com- 
ment any further. 

Soyatec has made the initial 
code donation under the Eclipse 
Public License 1.0. The project 
is hosted on SourceForge. 

The initial release is slated 
for spring 2009 and will target 
the Windows version of Eclipse, 
according to the fact sheet. Ver- 
sions for Linux and Mac OS X 
will follow. I 



Microsoft's Midori operating 
system will have a dependence 
on metadata. The aim is to 
allow the system to manage 
applications more reliably. 

In essence, declarative pro- 
gramming replaces imperative 
programming at the operating 
system level, Hammond said in 
a previous interview. 

Wahbe declined to com- 
ment on Oslo's potential link to 
Midori. 

"Once you are capturing 
metadata instead of processor 
(or OS) specific code," said 
Hammond, "you start to 
decouple the deployment of an 
app for the specification of its 
services. I've been seeing some 
interesting thinking lately that 
posits that the OS as we know 
is splitting into two parts, a 
hypervisor and virtual applica- 
tions (further than just virtual 
OSes). If this continues to hap- 
pen, then one approach to 
dealing with the complexity is 
using metadata to drive config- 
uration and provision of virtu- 
alized apps." 

Microsoft was expected to 
release M and Quadrant in a 
Community Technology Preview 
at the Professional Developers 
Conference late last month. I 
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JBoss Developer Studio is a set of eclipse-based development tools 
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it provides a certified, open source development environment that will 
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BY DAVID WORTHINGTON 



next version of Microsoft Visual Studio 
Team System will dive deeply into application 
life-cycle management, shaking up the terrain 
occupied by more-established ALM tool pro- 
ducers, and could pull model-driven architec- 
ture (MDA) into the mainstream of Windows 
application development, observers say 
Microsoft partners, meanwhile, are heralding the 
plans for Visual Studio Team System (VSTS) 2010 as 
an affirmation of ALM s significance and the validity 
of their own offerings, though for some the nod 
could be a double-edged sword. The software giant 
has traditionally relied on third parties to seed the 
Visual Studio ecosystem with ALM capabilities. 
VSTS 2010's built-in accommodations for ALM 
could threaten some partners' tools, said Gartner 
research vice president Jim Duggan. 

Tracy Ragan, COO of build management software 
vendor OpenMake, downplayed that concern. 
Microsoft is still focusing on its particular audience, 
she said, and "we are even more granular than that." 
She said partners would have opportunities to sup- 
port cross-language environments or to create solu- 
tions that work with legacy versions of Visual Studio 
that Microsoft no longer targets. "Microsoft isn't 
doing anything more than the open-source commu- 
nity is doing around Eclipse," Ragan said. 

At Seapine Software, which develops defect- and 
issue-tracking tools, senior product manager Jeff 
Amfahr said VSTS 2010 "helps validate the message 
that we've been talking about for a while, namely that 



the whole ALM life cycle is important and needs to 
be included. Since one of our key values is cross-plat- 
form ALM support, we don't necessarily view 
[Microsoft's move] as a problem." 

But partners that focus exclusively on Windows in 
the enterprise "should be concerned," Amfahr added. 

In response, Joe Marini, director of the Develop- 
er Tools Ecosystem at Microsoft, said the company 
has a rich and vital partner ecosystem around VSTS 
today and will maintain that in VSTS 2010. He added 
that Microsoft customers rely on its partners to help 
solve business problems across heterogeneous envi- 
ronments and that Microsoft recognizes their impor- 
tance to customers 

"This is why we include our partners early in the 
product development cycle so they can see our direc- 
tion and plan accordingly," he said. 

While Microsoft has not committed to a ship date, 
VSTS 2010 (formerly code-named Rosario) is 
acknowledged as a major release and will coincide 
with the introduction of .NET Framework 4.0. Much 
of the VSTS feature set revolves around the use of 
constraint-based modeling; other changes are better 
source code management and new facilities for con- 
tinuous testing, as well as for greater collaboration 
between developers and QA professionals. 

MDA SPOKEN HERE 

A Microsoft-created modeling language tentatively 
called "M" provides VSTS' core MDA capabilities. 
The language offers both textual and graphic views 



for creating models, and its declarative specifications 
become part of the application, said Microsoft cor- 
porate vice president Robert Wahbe. Modeling 
enables continuous integration, with code validated 
against the architecture before it is checked in. 

Visual Studio will offer multiple domain-specific 
views of models and will map physical architecture to 
assets. The combination of pictures and text will 
make it easier to share models, said Wahbe, adding 
that Visual Studio will integrate with a visual model- 
ing tool now under development. 

Most significantly, M, an XML-based abstraction, 
is designed for interoperability, with translation to 
lower-level modeling languages such as Business 
Process Execution Language and Unified Modeling 
Language. Microsoft intends to standardize the new 
language, he noted, without specifying how that 
would be done. 

Microsoft's embrace of UML will help the indus- 
try move past the paralyzing "UML/MDA vs. DSL 
[domain-specific language]" debates of the past five 
years, said Jeffrey Hammond, a senior analyst with 
Forrester Research. Microsoft joined the Object 
Management Group, which oversees the UML stan- 
dard, in September. 

"Microsoft's greater embrace of existing standards is 
good news for developers in general," said Andrew 
Binstock, principal analyst at Pacific Data Works and 
an SD Times columnist. "Microsoft has become more 
pragmatic in terms of the enterprise and is well aware 

continued on page 36 ► 
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possible now, but 

it is not without 

some challenges.' 

—Chris Menegay, consultant for 

| Notion Solutions and Microsoft 

regional director 
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of the actual processes that enterprises 
are adopting, and its moving to the fore- 
front of that." 

From a .NET developers perspective, 
Chris Menegay, a principal consultant for 
Notion Solutions and Microsoft regional 
director (recognized by Microsoft's 
Developer Platform evangelism group for 
technical expertise), said developers had 
primarily asked for "very nice tools" that 
would support UML. "Microsoft missed 
the mark badly with the Team System 
Architect Edition in 2005/2008," he wrote 
in an e-mail. 

Menegay explained that the VSTS 
2005/2008 modeling tools were focused on 
distributed systems, which was handy for 
applications with many Web services but of 
little value for the typical desktop Web 
applications that 
most developers 
build today. VSTS 
2010 will help 
developers design 
applications in a 
more useful way 
for the broadest 
base of customers, 
he said. 

Duggan said VSTS 2010 will let cus- 
tomers "stay on Microsoft ground; previ- 
ously, they have had to go to tools from 
companies such as Borland or IBM to 
handle UML modeling." 

Modeling is a foundational technology 
of Microsoft's Oslo initiative, a multiyear, 
multiproduct effort to help customers 
build, deploy, design and manage com- 
posite applications through MDA. 

BRANCHING OUT 

Source code management will figure 
heavily into the 2010 release of VSTS. Its 
Architecture Explorer will deliver new 
source control features, including branch 
visualization, which is designed to help 
developers understand complicated, deep 
branches and merge them back together. 

"That is a big deal for parallel devel- 
opment and for enterprise shops," said 
Duggan. "[Branch visualization] contin- 
ues the evolution of functions from 
'kitchen table' scale into something that is 
really competitive with [IBM] ClearCase 
and Serena Dimensions. They are not 
there yet, but this gets them closer." 

The feature is most useful for teams 
that need to maintain multiple releases 
in parallel for their customers, said 
Hammond. 

Menegay said the addition of branch 
visualization would make it easier for his 
consultancy to migrate customers away 
from ClearCase. He said he believes the 
feature is being added for competitive 
reasons. 

Binstock said VSTS 2010 is indeed a 
shot across IBM's bow. 

"It is clear that [Microsoft] is target- 



ing the Rational folks," Binstock said. 
"They have a pretty compelling story, to 
be honest; Rational is a 'heavy' product 
in the enterprise sense of the term. 

"If Visual Studio can deliver the 
same functionality without imposing 
heavy overhead on users, Microsoft will 
do quite well in the [ALM] space." 

Microsoft is also introducing tools to 
help organizations develop and test data- 
base changes the same way they handle 
source code, said Menegay. The compa- 
ny's database professional role and team 
developer role products, VSTS 2008 
Database Edition and VSTS 2008 Devel- 
opment Edition, have been pulled 
together into a unified product. 

"It's something that customers have 
been wanting for years, but it was just 
hard," he said. "With the tools Microsoft is 
building, it makes 
[such testing] 
possible now, but 
it is not without 
some challenges." 
Duggan said 
unifying the 

products might 
have been more 
of a marketing 
decision and less about ALM. The data- 
base edition had targeted SQL, and 
there was not enough differentiation to 
justify the split packaging, he said. 
"Adding it to the developer edition 
effectively is a price reduction or 
increase in value for many users, and 
should help drive the pace of upgrades," 
Duggan said. 

Microsoft is also appealing to the 
ALM set with new test tools that record 
the state of a running .NET application, 
all of the appropriate logs, and the 
debugging of the application through a 
suite of agents and collectors that it 
refers to as "TiVo for testers." The infor- 
mation is hooked into defect tracking 
and can be handed off to QA profession- 
als so they can reproduce and verify 
defects. 

"Testers have traditionally been sepa- 
rated from developers by both organiza- 
tion and tools," said Hammond. That 
model grows ineffective as teams transi- 
tion to agile development practices, he 
said, adding that the storage of informa- 
tion in separate repositories compounds 
the problem. Tighter integration makes 
it easier for developers and testers to 
work together in tight-cycle iterations, 
Hammond said. 

"This is huge," Menegay wrote. He 
explained that Microsoft has already 
made some headway by getting both 
groups onto a common tool platform 
with today's VSTS, but now they will 
"actually have good testing tools" to 
work with. 

"I've been playing with the CTPs 
[Community Technology Previews], and 
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the tools are looking very, very 
slick," Menegay commented. 

NO JAVA TOOLS 

There is a glaring void, howev- 
er: Java applications are not 
instrumented. Microsoft says 
customers should purchase 
third-party tools to test hetero- 
geneous applications. 

Microsoft is missing an 
opportunity as an ALM player 
by leaving it up to partners to 
integrate Team Foundation 
Server with Eclipse, said Ham- 
mond. "They force large enter- 
prises that have both .NET and 
Java into multiple tool stacks. 
That may be okay for practi- 
tioner tools, but it is not okay 
for ALM." 

Menegay said he had mixed 
opinions about VSTS' lack of 
Java support. "As big as 
Microsoft is, they do have finite 
resources. I would prefer that 
they spend that effort making 
.NET and SQL Server be light- 
years better than Java," he said, 
adding that a key request from 
people like himself is that 
Microsoft build its tools in such 
a way that the API allows for 
third parties to fill in the gaps. 

Microsoft says it is committed 
to addressing its customers' con- 
cerns. VSTS 2010 thus addresses 
the cost of defects by pulling 
testing into the software devel- 
opment life cycle earlier with a 
new impact analysis feature that 
interrogates source code and 
assigns test suites to code before 
it is checked in. VSTS 2010 will 
also include test-planning tools 
that capture manual tests. 

"Traceability and reuse of 
test assets help productivity and 
quality," said Duggan. But he 
added a caveat: "VSTS doesn't 
force developers to behave 
well, but reduces the penalty 
they incur if they do not behave 
well." 

Team Foundation Server 
can be configured to preclude a 
developer's checking in code 
unless certain conditions, such 
as creating test scripts or run- 
ning unit tests, have been met. 

"Different organizations will 
emphasize different types of 
testing," noted Menegay. He 
predicted an increased empha- 
sis on the frequency of unit 
testing as more organizations 
pay attention to quality. 

QA professionals will be 
empowered by such VSTS 
capabilities as a "recorder" fea- 



ture that verifies whether a 
tester has followed a test case 
correctly. "QA people writing 
automated [noncoded] tests in 
VSTS 2010 will help their team 
as well as the development 



team," Menegay observed. 

With greater emphasis on 
software quality and new tech- 
nology to break down the walls 
between ALM roles, Microsoft 
is putting heft behind its ALM 



efforts. But its acute reluc- 
tance to embrace Java may 
hamper its success. 

"The emergence of Micro- 
soft as a serious player in the 
ALM market will have the 



immediate effect of giving users 
more options and pressuring 
the two major ALM vendors: 
Rational [IBM] and Borland," 
Binstock commented in an e- 
mail. "The effect on both cus- 
tomers and competitors, how- 
ever, will be limited by the fact 
that the Microsoft tools support 
only .NET languages." I 
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FROM THE EDITORS 

Don't expect Microsoft 
to let Mono dictate 

The true test of a specification's openness is whether the company that 
sponsored the specification accepts third-party additions or changes. 
Microsoft submitted its Common Language Infrastructure to Ecma, a 
vendor consortium, on the basis that it was an open, non-proprietary 
specification. The Mono projects desire to contribute back to the speci- 
fication will test of Microsoft's earnestness. We don't predict that 
Microsoft will pass the test, but rather will squelch Mono's changes. 

From Day 1, of course, Microsoft has been in the driver's seat regard- 
ing the CLI and everything related to .NET. That is unlikely to change. 

In its efforts to replicate .NET 2.0, Mono thought up some interesting 
additions to the specification. That's good. An open specification should 
be dynamic and encourage broad participation. It shouldn't just be a pro- 
forma rubber stamp for one company's proprietary technology. 

While Mono is free to submit its ideas to Ecma, Microsoft remains 
incredibly powerful when it comes to CLI. The Ecma CLI working group 
must decide whether the additions are worthwhile, and Microsoft serves 
effectively as a gatekeeper. It can use the documented processes with Ecma 
to slow down any additions that it doesn't want. Even if, by some fluke, 
Ecma does approve some of Mono's changes to the CLI, Microsoft can sim- 
ply delay implementing them in its own code, or ignore them completely. 

It took the Mono team several years to develop Mono 2.0. The pace 
of the open-source project's work, and its relatively small installed base, 
is too underwhelming to threaten Microsoft's designs over .NET 
Microsoft is also cycling its energy toward the creation of .NET libraries 
such as LINQ, WCF and WPF, which Mono will be attempting to repli- 
cate in upcoming releases. 

Note that the .NET Framework has remained largely unaltered since 
the release of .NET 2.0, which means that Microsoft and Mono are using 
the same playbook. Despite Ecma, Mono has to scramble to stay on the 
same page. Because Mono has to ensure that it not only conforms to 
Ecma specifications, but also passes Microsoft's test suites, it is all but 
guaranteed that Mono — and anyone else seeking to create a CLI imple- 
mentation — must follow Microsoft's lead. 

Do not expect the CLI to evolve much any time soon, except where 
Microsoft intends to take it. In the end, the Ecma specification is just a 
rubber stamp. 

Python slithers toward maturity 

When Python appeared in 1991, it was hailed as a legible language. 
With all its white space, it forced developers to write applications that 
could be read through like a book. The scripting language was a big break 
with a world that was also just discovering the hard-to-read Perl and 
TCL. But Python trucked along, gathered a following, and eventually 
became one of the P's in the LAMP stack. 

After 17 years of evolution, Python is preparing to shed its skin of 
hacks. Python 3.0 is such a large step forward that it's essentially a whole 
new language, and it represents a significant break with the past. 
Python's standard library sheds thousands of lines of code, which can 
break applications that relied upon now-deprecated functions. 

As with any language, the easiest, most efficient ways to do things have 
evolved over time. The old way of interacting with an FTP server, or of 
sending messages to queues, has likely seen a number of revisions, mean- 
ing that today's Python 2.x developers can choose between a handful of 
options for almost any scenario. 

Many of those approaches are gone in Python 3.0, which disposes of 
many of the hacks that filled out functionality in the Python 2.x era. From 
what we've seen so far, Python 3.0 will be a big step ahead and may anger 
the faithful, but in the long run, it's a change that all Python developers 
knew was needed. I 
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The manycore era is upon us. Todays 
servers and desktop workstations are 
likely to be running dual quad-core 
chips. On such octocore machines, a sin- 
gle thread can only consume, at most, 
12.5% of the machine's processing pow- 
er. If you have a performance issue, you 
can't ignore that; you have to use parallel 
operations to achieve high performance. 

Reducing the behavior of 
todays machines to a single 
element is, of course, a gross 
simplification. Drive subsys- 
tems, memory access and 
cache behavior are all impor- 
tant to performance. For that 
matter, the processing power 
in the graphics subsystem may 
rival or surpass that of the 
cores in the "central" process- 
ing units. A single-threaded 
application may implicitly gain from a 
library or server that uses multiple 
threads. Professional database manage- 
ment systems, for instance, have many 
tasks that can be effectively parallelized 
in service to respond to a single query as 
quickly as possible. 

Nonetheless, teams are increasingly 
encountering performance plateaus and 
are facing up to the hard fact that leaps 
in performance with every processor 
generation are no longer the reality. 

Multithreaded programming, like 
manual memory management, is 
famously error-prone. The common wis- 
dom is that multithreaded programming 
is considerably harder than manual 
memory management, but that's a moot 
point. Teams no longer regularly incor- 
porate systems-level programming 
expertise, yet the most common thread- 
ing model, in which application develop- 
ers are responsible for maintaining locks 
on shared mutable memory, requires 
just such capability. Giving hundreds of 
thousands of programmers a multiyear 
education in a model that's inherently 
flawed is not the solution. 

I've talked about other models 
before, but software transactional mem- 
ory (STM) clearly seems to have gained 
strong momentum, especially at 
Microsoft. In the paper "Composable 
Memory Transactions," Tim Harris, 
Simon Marlow, Simon Peyton Jones and 
Maurice Herlihy of Microsoft Research 
summarize breakthroughs on hard prob- 
lems related to side effects and events. 
The authors use the Haskell language 
for their examples, and Peyton Jones 
does so again in his very approachable 
chapter on STM in the book "Beautiful 
Code," but the foundation they lay is 
applicable to different implementations. 

Other papers and software coming out 
of Microsoft Research show that STM is 
clearly a hot topic, supporting the buzz 
for STM that one hears from Microsoft's 
language folk. Chip manufacturers are 
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also excited, since hardware-supported 
STM would be a huge competitive advan- 
tage. The stars seem to be aligning. 

STM revolves around transactions — a 
familiar model for database program- 
mers. STM is similar to an optimistic DB 
transaction. The transaction executes 
with the assumption that no contention 
occurs; when the transaction ends, that 
assumption is checked. If the 
assumption proves false, the 
transaction is rolled back and 
potentially retried. Develop- 
ers are responsible for identi- 
fying the need for and bound- 
aries of the transactions but 
are not responsible for the 
mechanics of locking, detect- 
ing and rolling back. 

"Is that all? Why the fuss?" 
is the best reaction one can 
expect to a new programming model, and 
it's a common enough reaction to STM. 
But, of course, that is not all. 

At the low level, the semantics of 
composing transactions have been diffi- 
cult to crack. If someone raises an 
exception in an atomic block nested 
inside a transaction that has an "or" 
clause, do you execute the "or" or do you 
abort the whole transaction? (Harris et 
al. conclude that you abort.) 

At the pragmatic level, the aforemen- 
tioned side effects are a big deal. Com- 
puter scientists define side effects to 
mean anything that is in any way impor- 
tant to a person sitting in front of a com- 
puter, including such seemingly trivial 
matters as the user interface, writing to 
the hard drive and getting or sending data 
over a network. Since a transaction may 
need to be rolled back, and since transac- 
tions need to be composed together in 
various ways to be more than trivially use- 
ful, any behavior that affects the world 
outside the program has to be delayed 
until the outermost transaction is com- 
mitted. There is no way around that. 

For all of the optimism about STM, it 
should be noted that the common lock- 
based model can also be simple and 
effective. Speeding up a data-parallel 
loop with OpenMP or a threaded fore- 
ach may be the simplest concurrency 
that could possibly work, and while there 
are sharks in the ocean, that shouldn't 
keep one from getting one's toes wet. 

As a strategic choice, though, lock- 
based shared-mutable-memory pro- 
gramming is destined to become a niche 
model confined to systems-level pro- 
gramming. 

This transaction may take a few years 
to complete, but I think it will go through: 
atomic do { Learn STM(); Buy a 32-core 
machineO; } I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 
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averse 
suffer 



s a second-generation female devel- 
Loper (thanks, Mom!), I'll admit 
there are times when I am certain I 
belong in some sort of IT freak show. 
There aren't that many women in IT in 
the first place; the more technical the 
job, the fewer of us there appear to be. 
And we seem to drop out in larger num- 
bers as we get older. 

As I've read through a slew 
of posts and articles on women 
and IT in the past few months, 
I've discovered two things: 
They are almost always written 
by women, and they are just as 
sexist and offensive as they 
claim the IT environment to be. 

I'll say it again: They are 
sexist and offensive — and not 
just toward men, but to 
women as well. 

They assume that I'm risk 
because I'm a woman, that I 
under the strain of isolation because I'm 
a woman (it's a wonder I'm not on med- 
ication or in therapy, given my career 
choices) and that I use "helpful com- 
ments and directions" (I don't) because 
I'm a woman. But those assumptions are 
sexist stereotypes. 

In the same vein, these articles are sex- 
ist toward men. For example, they are 
often quick to point out that the IT envi- 
ronment isn't friendly to working mothers 
but fail to make the logical leap that it 
must then be unfriendly to working 
fathers as well. The assumption that work- 
ing mothers need special accommoda- 
tions while working fathers do not is 
incredibly shortsighted in a society where 
men and women are allegedly equal in all 
aspects of domestic and professional life. 

Further, it is assumed that men 
"write cryptic code" just to "show how 
clever they are" and that they are not 
supportive enough of their female 
coworkers — behaviors that eventually 
cause women to "flee" IT. 

THE 'RESEARCH' 

A Center for Work- Life Policy research 
study by Sylvia Ann Hewlett, Carolyn 
Buck Luce and Lisa J. Servon on the 
career trajectories of women in science 
and technology allegedly holds the key 
to the phenomenon of the female exo- 
dus from IT. 

According to Hewlett, founder of the 
center, the fact that I've spent most of 
my career working in "isolation" amid a 
sea of men should have turned me off to 
high tech. That supposed isolation is one 
of the "antigens" described in the report 
that drive women away from the field. 

Are men not colleagues? How can 
you be "isolated' in a workplace that is 
filled with other people who share the 
same responsibilities and goals? 

The report's authors appear to hold 
two preconceived notions: First, that men 




are the root of all evil, and second, that 
women need other women in order to 
succeed in a technical career. They reveal 
the latter assumption in their complaint 
that women lack mentors and role models 
in the IT workplace. That, of course, 
implies that women can be mentored and 
supported only by other women and that 
they can view only women as role models. 
It's like saying that only men 
can manage men and only 
women can manage women. 

Separate but equal, any- 
one? 

The report further 
implies that being a "geek" 
and being female are orthog- 
onal by stating, "Engineers 
have their 'hard-hat culture,' 
while biological and chemical 
scientists find themselves in 
the 'lab-coat culture' and computer 
experts inhabit a 'geek culture.'" What 
those "cultures" have in common, the 
authors assert, is that they are "at best 
unsupportive and at worst downright 
hostile to women." 

That implies women live outside the 
geek culture. I know more than a few 
women who'd likely be offended by that 
implication; I certainly am. I'm not even 
sure what the authors mean, since don't 
elaborate on what makes "geek culture" 
hostile and unsupportive or why this is 
problematic for women. 

Have I been subjected to hostile, 
demeaning attitudes and behavior from 
men in the workplace? Yes. But I've 
been subjected to such attitudes and 
behavior elsewhere too. It's a fact of life: 
Some people are jerks. It stands to rea- 
son you'll find them proportionally rep- 
resented in IT. 

I've certainly encountered one or two 
individuals at work who have acted dis- 
missively. But an entire "culture of dis- 
missal"? Never. A couple of jerks are 
hardly reason enough to condemn an 
entire profession or gender. 



CHANGE FOR ME 

Even more annoying about reports like 
the one by Hewlett et al. is that they sug- 
gest — indeed, sometimes demand — that 
IT change to suit women. 

In the past, women were denied 
careers in certain fields because they were 
deemed unable to adapt to and flourish in 
those careers. Many fought against such 
prejudice to prove that women were capa- 
ble of succeeding anywhere. 

Yet some studies still conclude that 
women can't adapt to the data center 
and can't flourish in technology careers, 
so IT must change to suit our tender 
sensibilities and needs. That conclusion 
dismisses the sacrifices and hard work of 
the women who came before us. 

Meanwhile, there's little concern 
that only 5.4% of all nursing jobs are 
occupied by men. We don't see in- 
depth studies that try to identify the 
root cause of nursing's gender imbal- 
ance (the cause is probably women, if 
we follow Hewlett's logic) and then 
address the problem in the work envi- 
ronment by demanding that the profes- 
sion change. 

So why do we focus so heavily on the 
gender gap in IT when the disparity is 
far worse in other professions? 

The premise of these reports is that 
there is something intrinsically wrong 
with the IT field. They assume that 
women who have switched career paths 
after starting in IT were driven (presum- 
ably with pitchforks) out of the profession 
by men and into a pitiful existence as busi- 
ness analysts or stay-at-home mothers. 

But a large part of the story is left 
untold: Are the women who have left IT 
happier then they were before? Do they 
enjoy what they are doing now more 
than they enjoyed IT? 

If so, then maybe the problem for 
these women wasn't the IT field or their 
male colleagues but their own initial 
career choices. I 

Lori MacVittie is a technical marketing 
manager at F5 Networks, a seller of appli- 
cation and network security products. 



Economy takes toll 
on IT coffers 



More than 40% of large businesses 
have cut IT spending in 2008 as the 
global economic news has worsened, 
according to Forrester Research, 
which surveyed roughly 950 senior 
IT managers in North America and 
Europe. Here's what those 
managers said. 



DATA WATCH 




North American 

organizations 

have cut IT budgets 



European 

organizations 

have cut IT budgets 



Among the full sample of U.S. and European managers: 

43% have cut their overall IT budgets 



24% have put discretionary spending on hold 
28% haven't adjusted their IT budgets 



Source: Forrester Research 
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Eclipse 3 ready, BLU AGE™ transforms 
instantly and automatically your UML 
2 and BMPN models into Java EE and 
.NET" business applications. 

BLU AGE™; an open solution (no runtime within generated 
application); offers: 

■ model debugging advanced features (models 
eaecu lability), 

■ reni time generation of your applications into the majority 
of existing frameworks and web-applications servers, 

• legacy applications models' extraction, re-engineering and 

re-generaLton into Java EE or .NET™ environments. 



BLU ACE tM supports multiple modeling tool a including Rational and MagicOfaw"' 
and generate automatically EAR/MSi; for several J2EE and .NET™ platforms. 



With BLU AGE™ free your self from technical 
constraints and capitalize on the business' 






.__^, - 




^ B- 














-[ immLf . 'J 




■' -|| illl " "r 




mmm J 






W * '" 








fe^M -■ ■ 


^^TtF^ . 


E;™™,*T=L, ~ 





" 



Visit us at EclipseWORLD 
on October 26-30, 

Reston, VA. 
Booth #601 



For Further information, online demos and trial 
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The return of NetRexx? 



lmost two and half years ago, I 
L wrote a brief survey of Java script- 
ing languages for this column. At the 
time, most of the current players were 
already on the radar screen but were still 
in embryonic form. 

A lot has changed since then. Lan- 
guages that seemed moribund at the 
time, such as Jython and NetRexx, are 
coming back to life, and languages that 
were solid then are much better defined 
now. In addition, nonscripting languages 
such as Scala and Fortress have appeared 
on the Java Virtual Machine and are gain- 
ing acceptance in various niches. 

In the belief that developers working 
with the various languages would have 
much to discuss, Sun held a confab in 
September that presented the languages 
and let engineers compare notes on 
their experiences with implementation. 
A wiki (wiki.jvmlangsummit.com) holds 
some, but alas too few, of the presenta- 
tions given during the event. 

One that was not posted but that I 
was able to obtain from the presenter, 
Amsterdam-based software architect 
Rene Vincent Jansen, discusses upcom- 
ing changes to an underappreciated 
JVM scripting language called NetRexx. 

NetRexx was designed to be a scripting 
language for the JVM. It was released in 



1997, before Groovy, Jython, JRuby or 
your favorite JVM-based scripting lan- 
guage was even a glint in anyone's eye. 
IBM fellow Mike Cowlishaw wrote 
NetRexx, basing it loosely on Rexx, a high- 
level language he wrote in 1979. Many 
consider Rexx to be the original high-lev- 
el scripting language. An open-source 
Rexx is available today as Open Object 
Rexx (www.oorexx.org). 

Reflecting its long-ago 
roots, Rexx retains a certain 
clunkiness. So Cowlishaw 
started with a clean slate for 
NetRexx, bringing over Rexx's 
best features but updating the 
syntax to fit nicely with mod- 
ern imperative and object- 
oriented programming lan- 
guages. The result is a 
delightful language that's easy 
to learn, use and be productive with. 

NetRexx's features include: 

• Duck typing (all types unless specified 
default to the basic Rexx Data type), 

• Default to high-speed arbitrary-preci- 
sion math so that rounding and over- 
flow errors go away (if a numeric type 
is specified, all overflows are flagged), 

• A built-in, template-based parser 
against which most languages' regular- 
expression capabilities pale, 



Integration Watch 




• Execution tracing (for the execution 
path through methods, variables or 
expressions, or for all three), and 

• Extensive string manipulation abilities 
(due in large part to Rexx's string- 
based default data type). 

Like Groovy, which shares NetRexx's 
ability to enforce or exclude data types, 
NetRexx comes as both an interpreter 
and a compiler. 

Of course, because it runs 
on the JVM, NetRexx has full 
access to the Java libraries, 
and Java programs can call 
NetRexx-generated classes 
with no difficulty. (Alterna- 
tively, NetRexx can generate 
commented Java source code 
instead of bytecodes.) 

To run NetRexx programs, 
the principal Java Archive file 
that's needed is NetRexxR.jar, which, in 
a throwback to a different era, weighs in 
at a minuscule 45KB. At that size, it can 
easily be used in applets and other situ- 
ations where space might be an issue. 
NetRexx apps peform well because they 
run on the JVM; because their runtime 
is small; and because NetRexx, unlike 
Groovy, does not proxy objects. 

As you can see, there's a lot to like 
about NetRexx. The few nontrivial apps 



I have written in it, although requiring a 
return to a more imperative model, were 
fun to code and were much faster and 
easier to develop than they would have 
been if I had written them in Java. 

So why is NetRexx essentially 
unknown, despite being freely available 
and well documented? 

Part of the reason is that IBM essen- 
tially abandoned NetRexx after giving 
the language its initial push. Users had 
hoped Big Blue would open-source 
NetRexx and enable a community of 
users and tool developers to coalesce, 
but that didn't come to pass. 

According to Jansen, however, IBM is 
now looking to offer NetRexx as open 
source and transfer ownership to the Rexx 
Language Association in the next few 
months. While that step would spur 
renewed interest and support, it's unclear 
whether RexxLA represents the best new 
home for the language. The move 
assumes that the largest group of new 
NetRexx users would come from the Rexx 
community, but I think Java users looking 
for an imperative scripting alternative are 
a larger and equally receptive target. 

Regardless, if NetRexx can finally 
obtain the support and community it 
richly deserves, your JVM toolbox will 
be much enhanced. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 




terabytes of Text 



♦ dozens of indexed, unindexed, fielded 
data and full-text search options 
(including Unicode support for hundreds 
of international languages) 

♦ file parsers / converters for 
hit-highlighted display of all popular 
file types 

♦ Spider supports static and dynamic web 
data; highlights hits while displaying 
links , formatting and Jimages intact 

♦ API supports .NET, C++, Java, databases, 
etc. New .NET Spider API 

The Smart Choice for 
Text Retrieval® since 1991 

♦ "Bottom line: dtSearch manages a 
terabyte of text in a single index 
and returns results in less than a 
second" - InfoWorld 



mm 
3#K 






Contact dtSearch for 
fully-functional evaluations 



♦ "For combing through large 
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Architects gain ground in data wars 



I've always thought a lot about how data 
relates to architecture, especially archi- 
tectural patterns such as SOA. While 
some would like to break them apart, I 
think SOA is architecture, and indeed the 
foundational architecture is always going 
to be information/data. To that end, I've 
always been an advocate for a Common 
Data Model (CDM) or forcing a seman- 
tic/data-level understanding of the 
domain, and then attempting a logical 
restructuring before that information is 
bound to services and/or processes. 

However, as I speak to people about 
data governance and SOA, I'm often tak- 
en aback by the lack of understanding 
about how both notions relate to one 
another. While most thought leaders in 
this space agree, I still think that the 
rank-and-file SOA architect ignores 
their data. Why? In most cases, because 
it's a huge mess, while in other cases, it's 
due to ownership issues within the 
enterprise. Sometimes it's a lot of both. 

So why is there an issue here? Say 
you're building a SOA for the first time. 
You know you'll have to collect services, 
either existing or new, and you know 
you'll have to do something with those 
services to form solutions. But services 
are not much without the data they con- 
trol, so clearly a large part of the archi- 



tecture is dealing with the underlying 
information, either understanding, 
restructuring or abstracting. 

The core issue is that a well-defined 
and well-designed SOA needs to consid- 
er the data, and possibly change the way 
the data is represented. This is done 
either through physical changes in the 
existing structures or schemas, 
or by leveraging a database 
abstraction layer that's able to 
expose a well-designed schema 
no matter how messed up and 
un-normalized the existing 
data is. In any event, you'll 
have to dig deep into the exist- 
ing data, and that will require 
dealing with the owners. 

Most architects don't deal 
with the information due to 
ownership or political issues within the 
enterprise. Since data governance spans 
many organizations in many instances, 
they quickly find that turf issues around 
controlling the existing enterprise data 
can quickly become a problem. And 
these are problems that are more diffi- 
cult to solve than any technology issues 
you'll have. 

I've seen architects do one of two 
things. First, they get the power they 
need to gain control of the data they 




need to understand and define for the 
architecture, typically through advocates 
at the executive level, if they exist. Or, 
they work around the ownership issues 
and they become much less effective. 

Obviously, the first option is the better 
approach, and most effective architects 
will have the people skills needed to con- 
vince the current data owners 
and stakeholders that the 
emerging SOA is something 
that will enhance the business. 
They are not here to find 
issues with the data, but to 
consider how that data can be 
more effective when lever- 
aged in the context of an agile 
architecture. However, unlike 
technology issues, which 
almost always have a solution, 
people issues do not. 

So, people issues aside, let's get a few 
things very clear. 

First, you can't do SOA right without a 
clear understanding of the data. I call this 
a semantic understanding in my SOA 
methodology, but it's really just defining a 
common understanding and modeling of 
the information within the architecture. 
While this is an important step in defin- 
ing and designing your SOA, it's also a 
step that is most often skipped for the 



reasons I gave above. However, like the 
foundation of a house, you need to have a 
good foundation of data/information to 
support the architecture. 

Second, force that metadata into a 
CDM for use within the new architec- 
ture. The CDM should be more reflec- 
tive of the business, with clean and 
understandable schemas and entities. 
This is both logical and physical, but not 
yet deployed. The CDM should be 
around for the existing project or prob- 
lem domain, and then expand to the 
entire enterprise. The idea is that we 
define and normalize the enterprise 
data, and build upon that foundation. 

Finally, figure out a technical 
approach to managing and changing the 
data. This may mean a physical change, 
an abstraction, or larger, more invasive 
redesign and normalization efforts. 
There are many tradeoffs here, and this 
really could be a separate project unto 
itself. The bad news is that this is a lot of 
work, and you'll have to deal with the 
turf issues as I suggested above. The 
good news is that within most enterpris- 
es, this is desperately needed, even out 
of the context of SOA. 

Any investment here will come back 
tenfold when you consider the value of 
agility and support for new business 
processes down the line. I 

Reach analyst David S. Linthicum at 
david@linthicumgroup . com. 
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AS HOUSING PRICES here in the Bay 
Area are still falling like stones, the wife 
and I have begun the search for our 
first home. It's not going 
to be easy, but we're 
putting on our helmets 
and diving in anyway 

Where do you begin 
to look? Why, within the 
wonderful Web archives 
hosted by local real 
estate agents. After only 
a few weeks of searching, I'm ready to 
say that there is one thing almost all real- 
tors desperately need: a SQL optimizer. 

Searching through thousands of 
house listings, each with pictures and 
vital statistics, shouldn't be an impossibly 
large task. Anything measured in thou- 
sands that doesn't involve simulation, 
generation or regulation shouldn't be 
tough for a computer to handle. And yet, 
most of the sites I've visited are so slow 
that I can make a pot of coffee while I 
wait for my search query to return. 

Were I a less patient man, such long 
search times would put me right out 
onto the street, looking for another real- 
tor. But as it happens, most of the other 
realtors in my area also have slow search 
routines. Thus, I'm stuck here waiting 
sometimes 10 minutes to see what hous- 
es are for sale in my area. Maybe the 
government should pass a SQL bailout 
plan as well. — Alex Handy 

THE WEB has produced some innova- 
tive satire over the past several U.S. 
presidential election cycles. It would be 
interesting to gauge whether Web 
satire affected anyone's decision in 
November, but I'll leave that work up 
to someone else. 
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My favorite this time around is 
www.palinaspresident.com. While many 
other sites have produced viral video, this 
is an interactive view of the Oval Office — 
updated daily. There are so many gags to 
discover, and it is wicked clever. No mat- 
ter where your views fall, you should be 
able to appreciate the slapstick humor, or 
even the absurdity of it all. 

Can you find the deer? Poor Bambi. 
What happens when you click the red 
phone? The "bridge to nowhere?" High- 
ly recommended. — David Worthington 

SILVERLIGHT (www.microsoft.com 
/silverlight) represents one of those rare 
occasions where Microsoft promised to 
deliver cross-platform software — and 
delivered on those promises with a first- 
class implementation for Mac OS X as 
well as Windows, and for Firefox and 
Safari in addition to Internet Explorer. 

For that, Microsoft deserved an 
unabashed round of applause. Sure, 
Microsoft is supporting competing plat- 
forms for selfish reasons so that it can 
more effectively compete against other 
rich Internet runtimes, specifically 
those from Adobe. But what of it? Com- 
panies aren't altruistic. They only sup- 
port competitors when it makes good 
business sense. 

This week saw the release of Sil- 
verlight 2, which I dutifully installed on 
my MacBook Pro this morning. I haven't 
noticed any difference in my Web expe- 
rience yet, but that's probably because I 
haven't encountered any Web content 
that's been written for the updated Sil- 
verlight. 

What I find funny about Silverlight 2 
specifically, and about Microsoft software 
in general, is one line in the specification 
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list: "Use Silverlight in the 32-bit Internet 
Explorer process on x64 systems." 

Am I the only person who feels that 
64-bit Windows has been a complete 
desktop dud? Sure, there are 64-bit ver- 
sions of XP and Windows Vista. For 
more than a year, I tried living in the 64- 
bit version of Windows XP Professional 
on my everyday desktop. It was a frus- 
trating challenge, thanks not only to the 
wonky architecture of the operating 
system, but also because of a lack of 
wholehearted support by Microsoft. 
Mainstream ISVs have generally ignored 
64-bit Windows desktops because 
they're following Microsoft's lead. 

Kudos to Microsoft for accepting and 
supporting the Mac with Silverlight. Boo 
to Microsoft for continuing to treat the 
most powerful version of its flagship 
desktop operating system as a second- 
class citizen. — Alan Zeichick 

MY BIGGEST FEAR right now? 
YouTube. I just know that one of these 
days, I'll be doing something stupid, like 
struggling to remove the end of a shirt 
from my pants zipper or doing the crazy, 
happy dance with my 9-year-old daugh- 
ter in a park, and be caught on some- 
one's camera phone and held up to the 
world for ridicule. 

What's my protection against someone 
taking an unauthorized video of me in an 
unflattering action and then posting it to 
the Web world at large? People who hold 
copyrights on material can insist YouTube 
take that material down, but what about 
me, some "Joe the plumber' whose image 
is put up there without my say-so? 

Looks like no more nights of margar- 

itas and nude flamenco dancing for me! 

— David Rubinstein 



business Briefs 




AMD and the Advanced Technology Investment Company (ATIC) 
of Abu Dhabi created a semiconductor manufacturing company 
for foundry production. AMD will contribute to the company, tem- 
porarily being called "The Foundry Company," with two fabrication 
facilities in Germany as well as intellectual property rights. ATIC is 
expected to invest US$2.1 billion to purchase its portion of the 
Foundry Company . . . CA announced plans to acquire IDFocus, a 
company that provides identity management technology. CA exec- 
utives said IDFocus prevents segregation-of-duties violations and 
automates identity management processes, such as provisioning, 
to help improve security. Terms of the deal were not disclosed . . . 
Hewlett-Packard will acquire LeftHand Networks, a network stor- 
age provider, for US$360 million to extend its own storage tech- 
nologies for mid-sized companies. HP executives said LeftHand's 
technology is a software-based architecture that runs on its Pro- 
Liant platform, and HP will provide better server products for vir- 
tual deployments with LeftHand's products . . . Nokia announced 
plans to acquire Oz Communications, a Montreal-based provider 
of mobile messaging solutions with approximately 220 employees. 
With the acquisition of Oz, Nokia said it will enable faster access to 
instant messaging and e-mail services, including AOL, Gmail and 
Hotmail. Oz has over 5.5 million monthly users, according to Nokia. 
Terms of the deal were not disclosed . . . Symantec signed a defin- 



itive agreement to acquire MessageLabs, a provider of online mes- 
saging and Web security services, for US$695 million. Symantec 
executives said the company gets an advantage in SaaS and mes- 
saging security markets with the acquisition. MessageLabs has 
approximately 8 million end users at around 19,000 businesses . . 
. Telerik, a company that sells Ul components for the .NET plat- 
form, announced plans to acquire Vanatec, a Germany-based 
object relational mapping company. Telerik executives said that 
the acquired object relational mapping products will reduce the 
number of coding hours and possibilities for bugs within .NET 
enterprise applications. Terms of the deal were not disclosed. 

EARNINGS: Intel announced a third-quarter revenue of US$10.2 
billion and operating income of $3.1 billion. The $3.1 billion in oper- 
ating income is up 37% from the same quarter a year before, while 
the $10.2 billion in revenue is 1% higher than the third quarter of 
2007 and 8% higher than the second quarter of 2008 . . . Enter- 
prise resource planning software provider Lawson Software, a St. 
Paul, Minn.-based company, announced revenues of US$190.9 mil- 
lion for the first quarter of fiscal year 2009, up 2% from the $187.4 
million in its fiscal 2008 first quarter. First quarter net loss was 
$2.5 million, compared to a net income of $5.6 million in the first 
quarter of fiscal 2008. 1 



events Calendar 



Dreamforce Global 


November 2-5 


Gathering 




San Francisco 




SALESF0RCE.COM 




www.salesforce.com/dreamforce 




ApacheCon 


November 3-7 


New Orleans 




APACHE SOFTWARE FOUNDATION 


us.apachecon.com 




WinHEC 


November 5-7 


Los Angeles 




MICROSOFT 




www.microsoft.com/winhec 




DevConnections 


November 10-13 


Fall 2008 




Las Vegas 




PENTON MEDIA 




www.devconnections.com 




Supercomputing 2008 


November 15-21 


Austin 




IEEE AND ACM 




sc08.supercomputing.org 




Adobe MAX 


November 16-19 


San Francisco 




ADOBE 




www.max.adobe.com/na 




CA World 


November 16-20 


Las Vegas 




CA 




www.caworld.com 




Storage Decisions 


November 17-19 


San Francisco 




TECHTARGET 




storagedecisions.techtarget.com/sanfran 


Management 


November 17-20 


Developers Conference 


Santa Clara 




WBEM SOLUTIONS 




www.mandevcon.com 




PASS Community 


November 18-21 


Summit 




Seattle 




PASS 




summit2008.sqlpass.org 




QCon San Francisco 


November 19-21 


San Francisco 




QCON 




qconsf.com 




SOAWorld 


November 19-21 


San Jose 




SYS-CON 




soaworld2008.com 




VSLive Dallas 


December 8-10 


Dallas 




1105 MEDIA 




vslive.com/dallas 




XML 2008 


December 8-11 


Arlington, Va. 




IDEALLIANCE 




www.idealliance.org/xml2008 




Macworld 


January 5-9 


Conference and Expo 




San Francisco 




IDG WORLD EXPO 




www.macworldexpo.com 




SharePoint TechCon 


January 27-29 


Burlingame, Calif. 




BZ MEDIA 




sptechcon.com 





For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Perforce The Fast Software Configuration Management System 




Perforce 



SOFTWARE 



Download a free copy of Perforce, no questions asked, 

from www.perforce.com. Free technical support is available 
throughout your evaluation. 



All trademarks and registered trademarks are property of their respective owners. 
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The integrated solution for defect tracking, test management and automated testing 



DevTrack 

Use DevTrack to track defects/issues 



Track each fssue through a definable 

workflow 

BCM integration r track fixes against their 

source code deliverables 

Deploy a resolution across multiple 

releases, versions and products 

Reporting and metrics to illustrate the 

entire defect Recycle 



DevTest 

Use DevTest to manage your testing 

• Create a central repository tor your test 
cases, knowledge items and automation 
scripts 

• Schedule releases and test cycles using a 
wizard-driven interface 

• Execute test assignments and submit 
defects from the same interface 

• Track results with real-time dashboards 
and reports 



TestLink 

Use TestLink to automate your testing 



Add automated tests to the DevTest 

test library 

Schedule automated teste along with 

manual tests 

Launch automated tests from the 

DevTest interface 

Track automation results with 

realtime dashboards and reports 



Tech Excel 

www.techexcel.com I 1-800-439-7782 



